From OSSEC Wiki

Jump to: navigation, search
[edit]

Configuring Checkpoint

Log Samples from Checkpoint here.


  • Run this command: 
# fw log -ftnp fw.log | logger -t Checkpoint


  • Explanation: 
- fw log :
  -f select current log file
  -t tail file
  -n use ip instead of name
  -p use port number instead of name


  • Do not use the following options in fw log: 
  -
  -l add date before timestamp
  -  Use of -l changes log format slightly
  -
  -g without : and ; delimiters
  -  Use of -g significantly changes log format
  -  this decoder is incompatible with -g
Retrieved from "http://www.ossec.net/wiki/index.php/Checkpoint_Config_Example"
Views
Personal tools