Hi all, I have an apache (RedHat) web server that is not configured to log it's files to the standard location, however the format is the same. The server is using cronolog to split up the logifiles into several directories. So I'm looking to monitor any file in /usr/local/apache/logs/*/*.log ; so would the ossec.conf file on the agent look like this:
<localfile>
<log_format>apache</log_format>
<location>/usr/local/apache/logs/*/*.log</location>
</localfile>
Thanks for your help.
Aaron
