Consolidated Snort logs

["De Los Santos, Jesus" <JSantos () imb org>]

What is the correct way to tell snort to send the alert.ids file to
another location (i.e. a consolidated log server)? We have four
different snort servers in our enterprise and instead of looking at four
different servers we want to consolidate all logs into one. We are using
Windows 2000 Server.

 

Your help will be greatly appreciated.

 

 

J. De Los Santos

System Administrator II

SDA Team, ITG

(804)219-1462