configure prelude-lml to work with Checkpoint Firewall logs
Alexey Mitrofanov <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
Hi! Is it possible to configure prelude-lml to work with Checkpoint Firewall log files. I see checkpoint.rules in the folder “ruleset”, but I don’t know how to describe “time-format” and “prefix-regex” in the prelude-lml.conf file, because, Checkpoint Firewall keeps the log files in their format. _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user