Snort mailing list archives
About syslog messages in snort
From: "C. L. Martinez" <carlopmart () gmail com>
Date: Fri, 21 Nov 2014 07:34:31 +0000
Hi all I have installed two snort instances in one host (both are snort 2.9.7.0). One snort instance has so_rules only and the other instance the rest of the rules. Ok. I need to differentiate syslog messages between these snort processes using, for example, a specific entry like "snort_so-sensor1" or "snort-sensor2" and, if it is possible, redirect all snort's syslog entries to a different log file. Exists some option when snort starts or inside conf file to do this?? I don't see anything about this in snort docs. Thanks. ------------------------------------------------------------------------------ Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- About syslog messages in snort C. L. Martinez (Nov 20)
- Re: About syslog messages in snort Robert Millott (Nov 21)
- Re: About syslog messages in snort C. L. Martinez (Nov 21)
- Re: About syslog messages in snort Robert Millott (Nov 21)
- Re: About syslog messages in snort C. L. Martinez (Nov 21)
- Re: About syslog messages in snort C. L. Martinez (Nov 21)
- Re: About syslog messages in snort Robert Millott (Nov 21)