Subject: [ossec-list] Re: ossec logs redirect to local

Hi did anyone figure out how to do this.  We just started using OSSEC and I have the same question as Ali?

On Thursday, June 10, 2010 at 8:41:32 AM UTC-4, Ali wrote:Hi Ossec'ers;

I need some help please. I would like the ossec server to log all
alerts and messages to local syslog NOT to a remote syslog. I have
rsyslog installed in the localhost, what changes do I make to /etc/
rsyslog.conf and what changes do I make to /etc/ossec.conf?

I have seen instruction for sending syslog to remote syslog host, but
I do not want to do that, I want to record ossec logs to local syslog
- say in /var/log/messages or /var/log/secure. How can I do this...

Any help will be greatly appreciated.



You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
For more options, visit

Programming list archiving by: Enterprise Git Hosting