Automatically apply log collection
This commit is contained in:
parent
deff8a3bce
commit
8940e2b9aa
|
@ -236,13 +236,13 @@ module_end
|
|||
|
||||
# This module /var/log/syslog file, under the module name "syslog"
|
||||
# And search for "ssh" string into it, sending only that information.
|
||||
# module_begin
|
||||
# module_name Syslog
|
||||
# module_description Search for ssh string into /var/log/syslog file
|
||||
# module_type log
|
||||
# module_regexp /var/log/syslog
|
||||
# module_pattern ssh
|
||||
# module_end
|
||||
module_begin
|
||||
module_name Syslog
|
||||
module_description Search for ssh string into /var/log/syslog file
|
||||
module_type log
|
||||
module_regexp /var/log/syslog
|
||||
module_pattern ssh
|
||||
module_end
|
||||
|
||||
#Hardening plugin for security compliance analysis. Enable to use it.
|
||||
#module_begin
|
||||
|
|
|
@ -225,15 +225,6 @@ module_plugin cscript.exe //B "%ProgramFiles%\Pandora_Agent\util\df.vbs"
|
|||
# module_absoluteinterval 7d
|
||||
# module_end
|
||||
|
||||
# Logs extraction
|
||||
#module_begin
|
||||
#module_name X_Server_log
|
||||
#module_description Logs extraction module
|
||||
#module_type log
|
||||
#module_regexp C:\server\logs\xserver.log
|
||||
#module_pattern .*
|
||||
#module_end
|
||||
|
||||
# Sample of Windows inventory module (ONLY ENTERPRISE)!
|
||||
#module_begin
|
||||
#module_name Inventory
|
||||
|
|
|
@ -165,7 +165,6 @@ module_end
|
|||
|
||||
# This module parses /var/log/syslog file, under the module name "syslog"
|
||||
# And search for "ssh" string into it, sending only that information.
|
||||
|
||||
module_begin
|
||||
module_name Syslog
|
||||
module_description Search for ssh string into /var/log/syslog file
|
||||
|
|
|
@ -380,13 +380,13 @@ module_end
|
|||
|
||||
# This module parses /var/log/syslog file, under the module name "syslog"
|
||||
# And search for "ssh" string into it, sending only that information.
|
||||
#module_begin
|
||||
#module_name Syslog
|
||||
#module_description Log collection modules
|
||||
#module_type log
|
||||
#module_regexp /var/log/syslog
|
||||
#module_pattern ssh
|
||||
#module_end
|
||||
module_begin
|
||||
module_name Syslog
|
||||
module_description Log collection modules
|
||||
module_type log
|
||||
module_regexp /var/log/syslog
|
||||
module_pattern ssh
|
||||
module_end
|
||||
|
||||
# Plugin example
|
||||
|
||||
|
|
|
@ -275,13 +275,13 @@ module_plugin autodiscover --default
|
|||
|
||||
# Log collection modules. This will collect log files for forensic analysis and store everything
|
||||
# This is for LOG monitoring. Different than log monitoring.
|
||||
#module_begin
|
||||
#module_name Syslog
|
||||
#module_description Log collection modules
|
||||
#module_type log
|
||||
#module_regexp /var/log/messages
|
||||
#module_pattern .*
|
||||
#module_end
|
||||
module_begin
|
||||
module_name Syslog
|
||||
module_description Log collection modules
|
||||
module_type log
|
||||
module_regexp /var/log/messages
|
||||
module_pattern .*
|
||||
module_end
|
||||
|
||||
# Another samples of monitoring modules
|
||||
|
||||
|
|
Loading…
Reference in New Issue