Hey, The issue is that we changed a bit the format of the logs on 2.6. If there is no source ip, the "Src ip:" entry is not added to the logs. Same thing for the username and other fields. The webui expect those and break when not in there...
Thanks, On Mon, Jun 13, 2011 at 4:24 PM, Kat <uncommon...@gmail.com> wrote: > I did post that in the "issues" on the beta page, but regardless of > that, I am running Splunk with the OSSEC Plugin and the beta and itt > is working out just fine, and since that is free for anything up to > 500 meg a day (if you are generating that many alerts - you are under > attack big time.), this makes a much better interface anyway. > > I am working on the WUI however, just because I want to see if I can > resolve it. I will let you know if I do in the next few days. > > -Kat > >
