OwlCyberSecurity - MANAGER

Edit File: check_lfd_logs.conf

# where the state information will be saved. $seekfilesdir = '/var/tmp/check_logfiles'; # where protocols with found patterns will be stored. $protocolsdir = '/tmp'; # where scripts will be searched for. $scriptpath = '/var/tmp'; @searches = ( { tag => 'lfd_root_compromise', logfile => '/var/log/lfd.log', rotation => 'centos', criticalpatterns => ['has detected a possible root compromise'], # criticalexceptions => '', options => 'sticky=10800', } );