Hi Guys,
I am new to Sophos XG Firewall and currently i am working to integrate Sophos XG with OSSIM for security event monitoring (SIEM).
I am able to forward all logs to the OSSIM but there is one more logs that i can not send to the SIEM, yes it is ModSecurity related logs. The logs file itself located at /log/reverseproxy.log.
Any idea/suggestion how to forward this log file into OSSIM/SIEM so that i can monitor it.
Thanks
Best Regards,
Wahyu N
This thread was automatically locked due to age.