Snort mailing list archives

More than one output module


From: "Esler, Joel - Contractor" <joel.esler () rcert-s army mil>
Date: Thu, 15 Jul 2004 10:57:39 -0400

Has anyone experianced any problems with outputting to more than one
output module?  Is there a reason for it? Does the order matter?
 
I have Snort logging to mysql, oracle, and syslog.  But it seems when
syslog is turned, occasionally an alert will be missed in the db?
 
J

Current thread: