when you exit vi/vim - just do :wq! - if you are root while editing - it will over-write it and you don't have to change perms.
On Wednesday, October 10, 2012 2:36:41 PM UTC-7, Adam wrote: > > I set up rsyslog to get messages from a remote network device and put the > messages in /var/log/<IP>/syslog.log How do i add that file to ossec so it > parses it and stuff? i attempted to edit ossec.conf but its read only. do i > need to change the prems on that make my changes, change the prems back > then restart ossec? Thank you.
