How to store OSSEC logs to MYSQL?

OSSEC is an open-source multi-platform intrusion detection system that runs on Windows, Linux, OpenBSD/FreeBSD, MacOS, and other operating systems. Including log analysis, comprehensive detection, and rook-kit detection.

This article will teach you how to store OSSEC logs to MYSQL? The procedure is as follows:

1) first install MYSQL

2) Go to the SRC directory of the OSSEC Installation File and execute

# Make setdb

Error: PostgreSQL client libraries not installed.

Info: Compiled with MySQL support.

This prompt will appear.

4) then execute the command in src.

Make all

If you have installed an ossec server, you can directly overwrite it once)

After compilation, follow

5) http://www.ossec.net/doc/manual/output/mysql-database-output.html to create a database for permissions and other operations.

Note: Before/var/ossec/bin/ossec-control restart, you must enable/var/ossec/bin/ossec-control enable database.