Hello,
I am looking information on getting Apache or Tomcat logs to come in to syslog
log.
Currently set is all the syslog is going to server and ArcSight.
*.info;mail.none;authpriv.none;cron.none @arserver ip
I want the Apache or Tomcat Access to go to Server as well as the ArcSight.
I already added the ip of ArchSight to the /etc/syslog.conf.
I already updated /etc/audisp/plugins.d/syslog.conf to "active = yes"
- originally its "no"
Any ideas?
Thanks
Joe
_______________________________________________
rhelv5-list mailing list
rhelv5-list@redhat.com
https://www.redhat.com/mailman/listinfo/rhelv5-list
