<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Combining Logwatch and OSSEC – Part 4</title>
	<atom:link href="http://www.chrisbrenton.org/2010/02/combining-logwatch-and-ossec-%e2%80%93-part-4/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.chrisbrenton.org/2010/02/combining-logwatch-and-ossec-%e2%80%93-part-4/</link>
	<description>Your source for invisible security bug spray</description>
	<lastBuildDate>Fri, 12 Aug 2011 18:22:08 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
	<item>
		<title>By: cozmic</title>
		<link>http://www.chrisbrenton.org/2010/02/combining-logwatch-and-ossec-%e2%80%93-part-4/comment-page-1/#comment-3633</link>
		<dc:creator>cozmic</dc:creator>
		<pubDate>Wed, 23 Jun 2010 11:41:50 +0000</pubDate>
		<guid isPermaLink="false">http://www.chrisbrenton.org/?p=811#comment-3633</guid>
		<description>Good tips for combining ossec logs with logwatch! 
Have you managed to apply date format for the ossec-alert logfile also?

Right now I get the whole ossec-alert logfile in my summary, not just the date range specified in logwatch (i.e. yesterday). It works good for the ossec.log.

Thanks</description>
		<content:encoded><![CDATA[<p>Good tips for combining ossec logs with logwatch!<br />
Have you managed to apply date format for the ossec-alert logfile also?</p>
<p>Right now I get the whole ossec-alert logfile in my summary, not just the date range specified in logwatch (i.e. yesterday). It works good for the ossec.log.</p>
<p>Thanks</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Chris</title>
		<link>http://www.chrisbrenton.org/2010/02/combining-logwatch-and-ossec-%e2%80%93-part-4/comment-page-1/#comment-1554</link>
		<dc:creator>Chris</dc:creator>
		<pubDate>Fri, 19 Feb 2010 20:37:27 +0000</pubDate>
		<guid isPermaLink="false">http://www.chrisbrenton.org/?p=811#comment-1554</guid>
		<description>Glad I could help! :)</description>
		<content:encoded><![CDATA[<p>Glad I could help! <img src='http://www.chrisbrenton.org/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: John Li</title>
		<link>http://www.chrisbrenton.org/2010/02/combining-logwatch-and-ossec-%e2%80%93-part-4/comment-page-1/#comment-1549</link>
		<dc:creator>John Li</dc:creator>
		<pubDate>Fri, 19 Feb 2010 15:41:40 +0000</pubDate>
		<guid isPermaLink="false">http://www.chrisbrenton.org/?p=811#comment-1549</guid>
		<description>Thanks for the great work. I am using both OSSEC and logwatch and I can definitely improve the posture with your guidance here.</description>
		<content:encoded><![CDATA[<p>Thanks for the great work. I am using both OSSEC and logwatch and I can definitely improve the posture with your guidance here.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

