Re: configure prelude-lml to work with Checkpoint Firewall logs
"Alexander Afonyashin" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
Hi Alexey, Please, post an example of log record. Will reply here. Or just visit #prelude at irc.freenode.net. If succeeded, example of time format will be included in next release of prelude-lml (hopefully). Best regards, Alex ----- Original Message ----- From: "Alexey Mitrofanov" To: [email protected] Subject: [prelude-user] configure prelude-lml to work with Checkpoint Firewall logs Date: Mon, 27 Oct 2008 12:04:22 +0200 Hi! Is it possible to configure prelude-lml to work with Checkpoint Firewall log files. I see checkpoint.rules in the folder “ruleset”, but I don’t know how to describe “time-format” and “prefix-regex” in the prelude-lml.conf file, because, Checkpoint Firewall keeps the log files in their format. _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user -- See Exclusive Video: Hollywood Life's 5th Annual Style Awards http://www.hollywoodlife.net/Awards.aspx?AwardsID=style2008 _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user