I would say something stupid like "great minds think alike" but that would assume something on my part. Instead I would simply say - Awesome - Thanks so much - exactly what I was looking for. Going to make things so incredibly easier!!
I love this group - everyone is greatly helpful! -k On Apr 3, 9:47 pm, Michael Starks <ossec-l...@michaelstarks.com> wrote: > On 04/03/2011 02:46 PM, Kat wrote: > > > So all I want to do is have OSSEC send the data, ignore it for alerts, > > but dump it into the database. I know about "log all" but was > > wondering the best way to have OSSEC ignore the data completely? > > This should do the > job:http://www.immutablesecurity.com/index.php/2010/01/29/using-ossec-for...