Re: prelude and samhain...

Jaime Ventura <[email protected]> Mon, 19 Apr 2010 17:36:15 +0100
Newsgroups gmane.comp.security.ids.prelude.user
Message-ID <[email protected]>
Regarding my previous message on this subject, and since I didn't got
any reply, I was wondering if could just debug and present a
patch/solution so that this kind of events would be presented on a
reasonable and understandable way.

Jaime



Jaime Ventura wrote:
> Hello,
>     I'm installing samhain on several servers as clients to a samhain
> logserver (yule) which is registered as a prelude analyzer.
>     The idea is to concentrate all logs to a unique prelude analyzer,
> instead of one analyzer per server.
>     Its working fine, i can see the reports on prelude via prewikka.
>
>     But the messages are disappointing as they are not meaningful:
> 1 x CRIT : [2010-04-06T11:59:30+0100] msg= (succeeded)
>
> 1 x CRIT : [2010-04-06T11:59:30+0100] msg=(succeeded)
>
> 1 x ALERT : [2010-04-06T11:59:27+0100] msg=(succeeded)
>
> 1 x CRIT : [2010-04-06T11:59:31+0100] msg=(succeeded)
>
> 1 x CRIT : [2010-04-06T11:59:30+0100] msg=(succeeded)
>
>
> Does anyone have experience with this?
> Thanks.
>
> --
> Jaime Ventura
>
>   
_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-user