Snort mailing list archives

RE: Archive alert from ACID/BASE


From: "Esler, Joel - Contractor" <joel.esler () rcert-s army mil>
Date: Mon, 21 Mar 2005 12:30:58 -0500

You create an archive database the same say you create your primary
database, just call it something different, be sure and set the correct
permissions and add this as the archive database in base_conf.php

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Wayne Ho
Sent: Monday, March 21, 2005 12:18 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Archive alert from ACID/BASE

Snort guru:

Can anyone walk me through how to "duplicate" the BASE
table/database schema to another database within the
MySQL, so that I can archive alerts to this
"secondary" database for longer retention? Which
tool/utility you use to archive alert?
I saw BASE can archive alerts (move) under action item
list. However, where I need to configure so those
alerts will be archived to proper location?

Many Thanks.

Wayne 


                
__________________________________ 
Do you Yahoo!? 
Yahoo! Small Business - Try our new resources site!
http://smallbusiness.yahoo.com/resources/ 


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: