i have configured rsyslogfile with line above and i can not get authenticvation errors on syslog serser
when i chante to *.* @192.168.34.102:514 i can receive only info system logs.
how to fix this?
I dont quite understand your goal here. Could you clarify your intentions?
Configuring "*.* @192.168.34.102:514" alone will not force MWG to start sending its log data to the syslog server.
You need to configure MWG to send events to the syslog server, there are plenty of discussions on this topic on the community:
I like this one in particular.
Thank you Jon for Ansewering ,
i have seen this before , what i want is to have only authentication to Gui of Mcafee
accessl log of webgateway we have webreporter.
i want to manage access to web console of mcaffee , access with root or any other access, some security events and logs like are managed on linux and send them in syslog server.
but when i configure *.* @192.168.34.102:514 i get only *.info mesaged even i triger some login faild atept to ssh or web Gui
Hi again Adriatik,
This is information that goes into the audit log. MWG does not have a good way to pipe audit log data to a syslog server.