json log format
Posted: Fri May 14, 2021 10:21 am
in a older version of ossec - you could use:
<logging>
<log_format>json</log_format>
</logging>
and manual kind of also mentions this:
https://www.ossec.net/docs/docs/formats/index.html
on a centos 7 server i get:
May 14 14:20:47 aws-mnm-checkmk ossec-hids[14820]: Starting ossec-hids: 2021/05/14 14:20:47 ossec-agentd(1230): ERROR: Invalid element in the configuration: 'logging'.
May 14 14:20:47 aws-mnm-checkmk ossec-hids[14820]: 2021/05/14 14:20:47 ossec-agentd(1202): ERROR: Configuration error at '/var/ossec/etc/ossec.conf'. Exiting.
can you confirm json output is still possible?
<logging>
<log_format>json</log_format>
</logging>
and manual kind of also mentions this:
https://www.ossec.net/docs/docs/formats/index.html
on a centos 7 server i get:
May 14 14:20:47 aws-mnm-checkmk ossec-hids[14820]: Starting ossec-hids: 2021/05/14 14:20:47 ossec-agentd(1230): ERROR: Invalid element in the configuration: 'logging'.
May 14 14:20:47 aws-mnm-checkmk ossec-hids[14820]: 2021/05/14 14:20:47 ossec-agentd(1202): ERROR: Configuration error at '/var/ossec/etc/ossec.conf'. Exiting.
can you confirm json output is still possible?