ossec / ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
http://www.ossec.net
Other
4.42k stars 1.03k forks source link

ossec read log from graylog #884

Open GlobuleBleu opened 8 years ago

GlobuleBleu commented 8 years ago

HI,

all my logs are send to graylog server. Is there a way to ossec read apache log (and all log) from remote graylog server?

ddpbsd commented 8 years ago

Nope. If graylog2 has an api to help with this, you could write something to pull the logs and dump them to a file.