From 968dce0aee15791d5b97a8eb0131de11fc2ecad2 Mon Sep 17 00:00:00 2001
From: weslambert <wlambertts@gmail.com>
Date: Mon, 5 Oct 2020 10:03:40 -0400
Subject: [PATCH] Adjust Wazuh logging so we don't log alerts to a separate
 file and so we don't write a separate log file for non-JSON for archives

---
 salt/wazuh/files/server/ossec.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/salt/wazuh/files/server/ossec.conf b/salt/wazuh/files/server/ossec.conf
index 9d6fa94bf..7077f48ce 100644
--- a/salt/wazuh/files/server/ossec.conf
+++ b/salt/wazuh/files/server/ossec.conf
@@ -7,8 +7,8 @@
 <ossec_config>
   <global>
     <jsonout_output>yes</jsonout_output>
-    <alerts_log>yes</alerts_log>
-    <logall>yes</logall>
+    <alerts_log>no</alerts_log>
+    <logall>no</logall>
     <logall_json>yes</logall_json>
     <email_notification>no</email_notification>
     <smtp_server>smtp.example.wazuh.com</smtp_server>