[Oisf-users] Forward Suricata to ELSA on a different box

[C. L. Martinez]

On Thu, Jan 30, 2014 at 6:47 PM, Doug Burks <doug.burks at gmail.com> wrote:
> Hi Jim,
>
> If you just want the Suricata alerts to go to a separate ELSA
> instance, then one option might be to update the output section of
> your barnyard2.conf to send to your separate ELSA syslog.
>
> If you have further questions or problems specific to Security Onion,
> please use our Security Onion mailing lists:
> https://code.google.com/p/security-onion/wiki/MailingLists
>
> Thanks,
> Doug
>

Or you can use some type of syslog daemon to send suricata logs to
ELSA node (like rsyslog).