[rsyslog-notify] Forum Thread: Re: Forwarding FROM Central rsyslog server - (Mode 'reply')
noreply at adiscon.com
noreply at adiscon.com
Wed Jan 22 21:02:50 CET 2014
User: Clifford
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24128#p24128
Message:
----------
[quote="rgerhards":2y7rxb1z]
*.* @@remote-address
[/quote:2y7rxb1z]
Would that keep the logs on the OSSIM server AND forward them onto the
Splunk server? If so, that's exactly what I want. I was thinking that would
prevent the logs from being kept locally and just simply pass them off to
the remote system.
More information about the rsyslog-notify
mailing list