Hi there, I have implemented reporting and managing ossec application for Splunk. It works fine until I try using a custom index name for the ossec syslog in Splunk. I see the logs populating the custom index and I can do the search but the dashboards are empty, that integration seems to break while using the custom index name. By default it seems to go in ‘main’, ‘default’ indexes in Splunk. Does any one have any ideas on how to make it to work with custom index name……thanks!! Anita
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
