On Tue, Apr 23, 2013 at 6:17 AM, Aliev, Dmitry <[email protected]> wrote: > Hi > Is that possible to store full logs (level 0) from all agent hosts at ossec > server?
Level 0 doesn't get logged. You'll have to change all of the 0s to 1s or higher. > i've changed > > < > > log_alert_level> to 0, restarted server, but there is no any level 0-1 > events in log/alerts/alerts.log. Or am i looking at wrong directory? > > And more, OSSEC deletes logs from agents. How to say it not to delete logs > at agents? > OSSEC does not delete logs from agents. What makes you think it does? > Thanks > > > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
