On Sat, Jan 30, 2010 at 2:58 AM, csirt <csirt...@googlemail.com> wrote: > Dan, > syslogd (in fact syslog-ng) resided on the same machine. Is it possible to > let the ossec-master produce syslogs out of the client-alerts and writes > them to a socket? Or must i use the localhost udp port ? > > regards >
I'm not aware of socket support, so udp is probably necessary.
