Re: prelude lml...
Matt Kettler <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
Jaime Ventura wrote: > Hello. > Im installing a server to collect logs from several machines. > For that, im using syslog-ng writing to files on directories like > "/log/$FULLHOST/$YEAR$MONTH/" for archive reasons. > Im planning to install prelude lml. Is there any way to configure > prelude to read files on directories name like this? Not sure if that's possible or not. You might consider having a monthly cronjob create symlink for /log/$FULLHOST/current/ which points to the current $YEAR$MONTH. The fullhost shouldn't be much of a problem, as I assume those don't change much over time. This way you'd just set prelude-lml for /log/system1/current/messages /log/system2/current/messages, etc, etc. _______________________________________________ Prelude-user site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-user