cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
267
Views
0
Helpful
1
Replies

log.YYYYMMDDHHMM files on 4230 sensors.

nolasaintfan
Level 1
Level 1

I'm looking into getting these files automatically emailed to me from the sensors via a cron job or other means to streamline getting alerts into a report. Anyone have any experience with this? Thank you.

1 Reply 1

jekrauss
Level 1
Level 1

It may be more appropriate to just collect this data from the director (either CSPM, Unix director, IDS MC, or IDS Event Viewer) as the data is already then and probably easier to collect, manipulate, transfer, and archive.

Look at the documentation for your director for more details.

my .02

Jeff