The problem is you are trying to use to different unifed types and a
single barnyard instance can only support one. Syslog uses unified
alert and mysql uses unified log. You'll have to run a seperate
process for each.
Bammkkkk
On 1/31/07, Grigoreva, Yelena <yelena.grigoreva@xxxxxxxxxxx> wrote:
>
>
> I have a small problem:
> I'd like to make Barnyard to convert the snort logs to MySQL and to syslog.
> I have configured it to do so, but with the command line :
> "barnyard -c /.../barnyard.conf -d /var/log/snort -f snort.alert -w
> /.../bylog.waldo"
> I don't get any messages in syslog ;(
>
> then I tried it in batch mode with:
> "barnyard -o /var/log/snort/snort.alert.xxxxxxxx -c
> /.../barnyard.conf"
> I got the messages...(barnyard works-it is clear)
> but how can I configure it to do the same job with all the new files I get?
> (I mean, it isn't reasonable to use barnyard always for every file in batch
> mode)
> What command line must I type?Maybe is the syslogd wrong configured, that it
> doesn't get messages from barnyard in the first case? What can it be?
>
> I will be very greatfull for any tip and advice.
>
>
>
>
>
> Mit freundlichem Gruß/ Best regards
>
> Yelena Grigoreva
>
>
>
> *****************************************************************************
>
> Siemens AG
>
> SEN ESY LC D3
>
> Schertlinstraße. 8
>
> D-81359 München
>
> Gebäude 7205-339
>
> Tel.: +49 89 722 27081
>
> mail to: yelena.grigoreva@xxxxxxxxxxx
>
>
>
> *****************************************************************************
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys - and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Barnyard-users mailing list
> Barnyard-users@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/barnyard-users
>
>
--
sguil - The Analyst Console for NSM
http://sguil.sf.net
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
|
