[Ossec-list] FIFO files and Agent/Server updates

[fcr-mailings at nerim.net (Fred)]

Hello everybody,
 
I would have a question on OSSEC.
 
1) First is that I have a problem with Apache logs. As we use "logrotate"
for rotation, log files names are always different, including the current
one. A solution would be to use a FIFO file: Apache logs would be copied in
FIFO files.
So my questions are:
 
    - can OSSEC Agent may read FIFO files (localfile directive) ?
    - are there any risks that Apache may block in case of problem with FIFO
?
 
Thanks a lot.
 
Regards,
 
Fred
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.underlinux.com.br/pipermail/ossec-list/attachments/20060523/66dc5b54/attachment.html