[Snort-users] snort output logging to two places at the same time
pmelson at ...11827...
Fri Apr 27 10:23:10 EDT 2007
> However, I am just wondering if Snort is able to log to both unified log
format as well as syslog format
> at the same time too?
> E.g. in snort config I specify
> output syslog: LOG_ALERT
> output log_unified: filename snort.log, limit 128
> Anyone tried this before? Appreciate your response.
Yes, this works just fine.
More information about the Snort-users