Re: Syslog and Prelude-lml client
"Sebastien Tricaud" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
Hello Jimmy, On Wed, Jan 30, 2008 at 3:23 AM, Jimmy Tharel <[email protected]> wrote: > > So, the firewall syslog writes to a new directory everyday. How do I get the prelude-lml client to account for this? > The recommended solution is to redirect your log in both the /YEAR/MONTH/DAY/ directory AND in /everything.log file. This way you can setup prelude lml to monitor everything.log. Currently no code in prelude lml supports a year/month/day rotation. Maybe you can open a ticket on https://trac.prelude-ids.org about this issue, so that we will not forget to write the code when we will have time ;-) Sebastien. _______________________________________________ Prelude-user site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-user