Merge pull request #1784 from drsjb80/master

Added authentication log file location for debian-based systems
ossec · Nov 2, 2019 · e5aefed · e5aefed
2 parents f55bac0 + 552c613
commit e5aefed
Show file tree

Hide file tree

Showing 4 changed files with 20 additions and 0 deletions.
diff --git a/etc/ossec-agent.conf b/etc/ossec-agent.conf
@@ -41,6 +41,11 @@
     <location>/var/log/authlog</location>
   </localfile>
 
+  <localfile>
+    <log_format>syslog</log_format>
+    <location>/var/log/auth.log</location>
+  </localfile>
+
   <localfile>
     <log_format>syslog</log_format>
     <location>/var/log/secure</location>

diff --git a/etc/ossec-local.conf b/etc/ossec-local.conf
@@ -176,6 +176,11 @@
     <location>/var/log/authlog</location>
   </localfile>
 
+  <localfile>
+    <log_format>syslog</log_format>
+    <location>/var/log/auth.log</location>
+  </localfile>
+
   <localfile>
     <log_format>syslog</log_format>
     <location>/var/log/secure</location>

diff --git a/etc/ossec-server.conf b/etc/ossec-server.conf
@@ -180,6 +180,11 @@
     <location>/var/log/authlog</location>
   </localfile>
 
+  <localfile>
+    <log_format>syslog</log_format>
+    <location>/var/log/auth.log</location>
+  </localfile>
+
   <localfile>
     <log_format>syslog</log_format>
     <location>/var/log/secure</location>

diff --git a/etc/ossec.conf b/etc/ossec.conf
@@ -137,6 +137,11 @@
     <location>/var/log/authlog</location>
   </localfile>
 
+  <localfile>
+    <log_format>syslog</log_format>
+    <location>/var/log/auth.log</location>
+  </localfile>
+
   <localfile>
     <log_format>syslog</log_format>
     <location>/var/log/secure</location>