Re: prelude and samhain...
Jaime Ventura <[email protected]> Mon, 19 Apr 2010 17:36:15 +0100
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
Regarding my previous message on this subject, and since I didn't got any reply, I was wondering if could just debug and present a patch/solution so that this kind of events would be presented on a reasonable and understandable way. Jaime Jaime Ventura wrote: > Hello, > I'm installing samhain on several servers as clients to a samhain > logserver (yule) which is registered as a prelude analyzer. > The idea is to concentrate all logs to a unique prelude analyzer, > instead of one analyzer per server. > Its working fine, i can see the reports on prelude via prewikka. > > But the messages are disappointing as they are not meaningful: > 1 x CRIT : [2010-04-06T11:59:30+0100] msg= (succeeded) > > 1 x CRIT : [2010-04-06T11:59:30+0100] msg=(succeeded) > > 1 x ALERT : [2010-04-06T11:59:27+0100] msg=(succeeded) > > 1 x CRIT : [2010-04-06T11:59:31+0100] msg=(succeeded) > > 1 x CRIT : [2010-04-06T11:59:30+0100] msg=(succeeded) > > > Does anyone have experience with this? > Thanks. > > -- > Jaime Ventura > > _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-technologies.com/mailman/listinfo/prelude-user