Is there any way to NOT log to the local log file ({x}:\program files\ossec-agent\ossec.log) with the Windows Agent? I have the agent running on a domain controller and it grows quite large – quite quickly. It seems to be logging everything – not just alerts. Because everything it logs is in the local event viewer, I really don't need this log. Plus the OSSEC server keeps the alert logged.
Charles E. Jennings V
Senior Network Engineer
Imaging and Data Capture Solutions
![]()
Zona Franca America ● Edificio E-25
600 Metros Norte Mall Real Cariari ● Heredia, Costa Rica
Office: 011-(506)-293-4127 ext. 411 ● Cell: 011-(506)-846-0296 ● Fax: 011-(506)-293-4335
This message is confidential, intended only for the named recipient(s) and may contain information that is privileged or exempt from disclosure under applicable law. If you are not the intended recipient(s), you are notified that the dissemination, distribution, or copying of this message is strictly prohibited. If you receive this message in error or are not the named recipient(s), please notify the sender at either the fax address or telephone number above and delete this message. Thank you.