Well, if you want to see the AV alerts in OSSEC, first you need to send the logs to OSSEC (using *localfile *or via syslog). Then, create decoders and rules.
Regards. On Friday, September 9, 2016 at 9:47:34 AM UTC+2, al...@mazm.ru wrote: > > AV logs situated in .db file > cant show it > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
