[ossec-list] log-format autitd

2012-12-11 Thread Roman K
Hi ALL. After upgrading ossec to 2.7 release I try to check auditd logs. server side ossec.conf changes: auditd /var/log/audit/audit.log # service ossec restart Stopping OSSEC:[ OK ] Starting OSSEC: 2012/12/11 12:48:35 ossec-config(123

Re: [ossec-list] log-format autitd

2012-12-11 Thread dan (ddp)
On Tue, Dec 11, 2012 at 6:20 AM, Roman K wrote: > Hi ALL. After upgrading ossec to 2.7 release I try to check auditd logs. > > server side ossec.conf changes: > > > auditd > /var/log/audit/audit.log > > > # service ossec restart > Stopping OSSEC: