[Snort-users] Send snort alerts via syslog to ArcSight
pablo.atiaga at ...15848...
Thu Sep 27 16:36:00 EDT 2012
I need to send snort alert to ArcSight via syslog, i found a
configuration just changing one line in the snort.conf but it doesn't
work. I already try sending events with other application and with
barnyard and work, but i need to send from snort directly because that's
the only way to send all the parameters correctly. I'm using snort 188.8.131.52.
Thanks for any help that you could provide me,.
Pablo Alberto Atiaga Galeas
IT Security Specialist
EGOVERMENT SOLUTIONS S.A.
More information about the Snort-users