logging snort alerts to mysql db - Raspberry Pi Forums


i using code in snort configuration file:

code: select all

output database: log, mysql, dbname=snort user=java password=password host=localhost 
error:

code: select all

database: must enter database name in configuration file   usage: database plugin   output database: [log | alert], [type of database], [parameter list]   [log | alert] selects whether plugin use alert or  log facility.   first argument, must supply type of database.  possible values mysql, postgresql, odbc, oracle ,  mssql  parameter list consists of key value pairs. proper  format list of key=value pairs each separated space.   parameter absolutely necessary "dbname".  other parameters optional may necessary  depending on how have configured rdbms.   dbname - name of database connecting   host - host rdbms on   port - port number rdbms listening on   user - connect database user   password - password given user   sensor_name - specify own name snort sensor. if         not specify name 1 generated automatically   encoding - specify data encoding type (hex, base64, or ascii)   detail - specify detail level (full or fast)   ignore_bpf - specify if want ignore bpf part sensor                definition (yes or no, no default)   example:  configuration using mysql database  name of "snort". user "snortusr@localhost" has insert , select  privileges on "snort" database , not require password.  following line enables snort log database.   output database: log, mysql, dbname=snort user=snortusr host=localhost  error: fatal error, quitting.. 
understand saying, have dbname defined...



raspberrypi



Comments