Re: change syslog messages

[waldo kitty <wkitty42 () windstream net>]

On 3/11/2014 12:39 PM, Budinich Galvez, Luis Alberto wrote:
> Hello, snort users!!!
>
> I want to ask if would be possible to send all snort syslog-messages to another
> log file (not /var/log/messages). ¿ What do you think?

this has to do with your syslog package... snort outputs its log entries using 
certain facility codes... you have to configure your syslog to log the desired 
facility entries to another file and you may have to also configure your snort 
to use other facility codes...


http://manual.snort.org/node21.html

this documentation will give you the particulars you need to know for the snort 
side of the fence... the other side, your syslog, will have its own 
configuration instructions elsewhere...

-- 
NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!