[Oisf-users] different logs for different prio

[Cooper F. Nelson]

This is what we do.  It's easy to use any of a number of third-party
logging solutions to this.

On 6/5/2017 5:28 AM, Peter Manev wrote:
> On Tue, May 30, 2017 at 7:32 AM, Christoph Kaminski
> <christoph.kaminski at biotronik.com> wrote:
>> > Hi
>> >
>> > it is possible to use different log files for different priority of the
>> > events?
>> >
>> > for example:
>> > prio 1 event > alert_prio1.log
>> > prio 2 event > alert_prio2.log
>> > etc
> Not at the moment.
> What is the reason behind the request? Isn't there something you could
> do on the post processing/event log shipping/filtering  level instead?
> 


-- 
Cooper Nelson
IT Security - Information Technology Services
University of California San Diego
(858) 534-6487 - cnelson at ucsd.edu
https://cybersecurity.ucsd.edu

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20170605/f8b8bf16/attachment-0002.sig>