On Mon, Aug 31, 2015 at 11:37 AM, <[email protected]> wrote: > Hello, > > I was wondering if it is possible to use the client-syslog tool packaged > with OSSEC, when OSSEC is outputting alerts in a custom format. I tried > turning it on and using it with the custom formatting but it would not send > alerts unless the format of the alert was left alone in its default state. > How does OSSEC pull the alerts from the alerts.log ? is it hardcoded with a > specific format ? >
Support for custom log formats was never added to csyslogd. There has been some initial work to have csyslogd read from the zmq interface, but it stalled due to time issues. > Thanks, > Jacob > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
