Hi,
I have not used databases in OSSEC, but you can choose the type in the
configuration:
<ossec_config>
<database_output>
<hostname>192.168.2.30</hostname>
<username>ossecuser</username>
<password>ossecpass</password>
<database>ossec</database>
<type>mysql</type>
</database_output>
</ossec_config>
In order to use databases, you must compile OSSEC with database support:
# cd ossec-hids-*
# cd src; make setdb; cd ..
# ./install.sh
# /var/ossec/bin/ossec-control enable database
Also, you can do it with:
# make TARGET=server DATABASE=mysql install
Documentation:
http://ossec-docs.readthedocs.io/en/latest/manual/output/database-output.html
http://ossec-docs.readthedocs.io/en/latest/manual/output/mysql-database-output.html
http://ossec-docs.readthedocs.io/en/latest/manual/output/pgsql-database-outout.html
I hope it helps.
Regards.
On Tuesday, December 13, 2016 at 1:35:40 AM UTC+1, ste...@uw.edu wrote:
>
> Hi,
>
> There hasn't been any action on this topic for over a year but it was
> never answered and I'm running into the same issue. What libraries is it
> looking for? Is there somewhere that I can look at, possibly edit the
> list? Why does it look for particular libraries, couldn't I just specify
> the type of database (MySQL or PostgreSql) that I want to use?
>
> Natassia
>
> On Tuesday, September 22, 2015 at 7:24:08 PM UTC-7, dan (ddpbsd) wrote:
>
>> On Sat, Sep 19, 2015 at 10:42 AM, Kai Chung Lau <lauka...@gmail.com>
>> wrote:
>> > I know Ossec supports PostgreSql and Mysql, but since MariaDb is the
>> drop-in
>> > replacement for Mysql, can Ossec also work with Mariadb?
>> >
>> > I have tried recompiling Ossec but it doesn't work.
>> > [root@ju src]# make setdb;
>> >
>> > Error: PostgreSQL client libraries not installed.
>> >
>> > Error: DB libraries not installed.
>> >
>>
>> Perhaps your distro is putting things in places OSSEC doesn't expect?
>> You're not giving us much to go on.
>>
>> > --
>> >
>> > ---
>> > You received this message because you are subscribed to the Google
>> Groups
>> > "ossec-list" group.
>> > To unsubscribe from this group and stop receiving emails from it, send
>> an
>> > email to ossec-list+...@googlegroups.com.
>> > For more options, visit https://groups.google.com/d/optout.
>>
>
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
