Creating logs for every event
Edit ossec.conf in the Wazuh manager
ossec.conf in the Wazuh manager <ossec_config>
<global>
-- <logall>no</logall>
++ <logall>yes</logall>
-- <logall_json>no</logall_json>
++ <logall_json>yes</logall_json>
</global>
</ossec_config>Last updated