HibikeQuantum / eventlog-to-syslog

Automatically exported from code.google.com/p/eventlog-to-syslog
0 stars 0 forks source link

evtsys.cfg is not clear #56

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
Please clarify the note: what does Security-Auditing:* do? Does it add or 
remove it from the log? In the doc, you say that it will remove it. A link to 
an online doc at the right title would be nice.

'!!!!THIS FILE IS REQUIRED FOR THE SERVICE TO FUNCTION!!!!
'
'Comments must start with an apostrophe and
'must be the only thing on that line.
'
'Do not combine comments and definitions on the same line!
'
'Format is as follows - EventSource:EventID
'Use * as a wildcard to ignore all ID's from a given source
'E.g. Security-Auditing:*
'
'In Vista/2k8 and upwards remove the 'Microsoft-Windows-' prefix
'**********************:**************************

Original issue reported on code.google.com by malar...@scolab.com on 21 Mar 2012 at 2:48

GoogleCodeExporter commented 8 years ago
It can do either, depending on the setting of the IncludeOnly flag. Hopefully 
the doc outlines this clearly enough. If there is something you think I should 
clarify please let me know and I can change it.

Original comment by sherwin....@gmail.com on 16 Aug 2012 at 2:06

GoogleCodeExporter commented 8 years ago
Added link to online docs in the default config file.

Original comment by sherwin....@gmail.com on 16 Oct 2012 at 2:25

GoogleCodeExporter commented 8 years ago
Fixed, awaiting build and test.

Original comment by sherwin....@gmail.com on 16 Oct 2012 at 4:40