[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ossec-list] Storing logs in a different location

To: ossec-list@xxxxxxxxx, ossec-list@xxxxxxxxxxxxxxxx
Subject: [ossec-list] Storing logs in a different location
From: "Zach Patrick" <rzp2314@xxxxxxxxx>
Date: Fri, 13 Jul 2007 13:20:49 -0400
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; b=d2LCO532jLxjYXan/OpMQ8vO0D13tJ1mxvSjEJmFI2e4z7+cj8ENTJEvDdEyy0DwNNJEp2my0YNB1wmLtgmz4cqge9XPhXh84jH++N5+sSumMAXBMqRaTZpStOWQ56IlDkmpHvTcX2dyRwghVGXME/Xn++H9OJZxhNlaLOIk0p8=

Hi List,

Ossec is located at /var/ossec, and the logs are currently being stored at /var/ossec/logs. The /var/ partition on our ossec server is not very large and the logs are growing rapidly. I've been looking through the documentation, ossec files, and mailing list, and can't seem to find anywhere to specify where I want to store the log files. Is there an easy way to do this without needing to reinstall with ossec in a different directory or using links?

Thanks for any help!

~Zach

Follow-Ups:
- [ossec-list] Re: Storing logs in a different location
  - From: Daniel Cid

Prev by Date: [ossec-list] Indexing ossec alerts with Splunk
Next by Date: [ossec-list] Ossec Problem: email_alert_level not being honored. Alert level 3 received in mail.
Previous by thread: [ossec-list] Indexing ossec alerts with Splunk
Next by thread: [ossec-list] Re: Storing logs in a different location
Index(es):
- Date
- Thread

OSSEC home | Main Index | Thread Index

OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.