Hi Kat,
On Thu, Mar 17, 2011 at 1:45 PM, Kat wrote:
> Here is a question for the folks that know the innards of OSSEC. If
> OSSEC agent is watching a log file, and all the processing happens on
> the server - does that mean all the data in that log file is available
> on the ossec server?
>
Yes,
Here is a question for the folks that know the innards of OSSEC. If
OSSEC agent is watching a log file, and all the processing happens on
the server - does that mean all the data in that log file is available
on the ossec server?
In otherwords, if I had syslog sending to a central server, and yet
