Snort mailing list archives
odd output plugin behavior?
From: Kiira Triea <kiira-t () mail bsasinc org>
Date: Tue, 19 Jun 2001 10:06:45 -0400 (EDT)
Hi Snorters, Maybe I'm missing something simple here but I want an output that will write to a logfile so that my Logchecker can email cheery tales of nefarious s'kddies but I also want my alerts going into my posgresql DB. So I did this in snort.conf as per the example: ruletype redalert { type alert output alert_syslog: LOG_LOCAL2 output database: alert, postgresql, user=user dbname=snort password=password } But it hosed... alerts write to /var/log/alert and stop going into the Pg database and nothing goes to the log file I set up in syslog.conf for LOCAL2. Snort, and the associated stuff that others have added, truly rocks. Thanks to all. Kiira Emergency Holographic Systems Analyst _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- odd output plugin behavior? Kiira Triea (Jun 19)
- Re: odd output plugin behavior? Erek Adams (Jun 19)
- Re: odd output plugin behavior? Kiira Triea (Jun 19)
- Re: odd output plugin behavior? Erek Adams (Jun 19)