[ossec-list] Edit eventlog format

2016-09-08 Thread 'Stormgamer16' via ossec-list
Hi everyone! I've installed an ossec agent on a windows server. The server produces audit success events that look like this in the eventviewer: userinfo1 ipinfo2 domain info3 access important the installed ossec agent parses the events to the archives.log where they

[ossec-list] Edit eventlog format

2016-09-08 Thread 'Stormgamer16' via ossec-list
Hi everyone! I've installed an ossec agent on a windows server. The server produces audit success events that look like this in the eventviewer: userinfo1 ipinfo2 domain info3 access important the installed ossec agent parses the events to the archives.log where they