[Snort-users] how do I stop snort logging to /var/log/snort and only the databa se?

Martijn Heemels martijn at ...1736...
Sat Oct 27 13:06:01 EDT 2001


 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Erik,

isn't that simply a matter of removing the first output line you're
using so that only the database output remains?
I'm not entirely sure, since I'm not logging to a db.

Hope this helps,
Martijn

> output alert_syslog: LOG_AUTH LOG_ALERT LOG_PID
> output database: alert, mysql, user=XXXXXX password=XXXXXX
> dbname=snort host=localhost sensor_name=XXXXXX

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBO9sTaBLMC0rbivl4EQJQZQCgxsrATq1wuEi0dSHmKtbMKCn9GmQAoP8Q
qdZ5N5RK1Iu2OXT97mPXAxrz
=Vv6o
-----END PGP SIGNATURE-----





More information about the Snort-users mailing list