mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
add auth log path for Centos
This commit is contained in:
@@ -179,12 +179,17 @@
|
|||||||
<log_format>syslog</log_format>
|
<log_format>syslog</log_format>
|
||||||
<location>/var/ossec/logs/active-responses.log</location>
|
<location>/var/ossec/logs/active-responses.log</location>
|
||||||
</localfile>
|
</localfile>
|
||||||
|
%- if grains['os'] == 'Ubuntu' %}
|
||||||
<localfile>
|
<localfile>
|
||||||
<log_format>syslog</log_format>
|
<log_format>syslog</log_format>
|
||||||
<location>/var/log/auth.log</location>
|
<location>/var/log/auth.log</location>
|
||||||
</localfile>
|
</localfile>
|
||||||
|
{%- else %}
|
||||||
|
<localfile>
|
||||||
|
<log_format>syslog</log_format>
|
||||||
|
<location>/var/log/secure</location>
|
||||||
|
</localfile>
|
||||||
|
{%- endif %}
|
||||||
<localfile>
|
<localfile>
|
||||||
<log_format>syslog</log_format>
|
<log_format>syslog</log_format>
|
||||||
<location>/var/log/syslog</location>
|
<location>/var/log/syslog</location>
|
||||||
|
|||||||
Reference in New Issue
Block a user