Database Output options are available in the the following installation types:
All database_output options must be configured in the /var/ossec/etc/ossec.conf and used within the <ossec_config> tag.
XML excerpt to show location:
<ossec_config>
<database_output>
<!--
Database Output options here
-->
</database_output>
</ossec_config>
database_output
¶hostname
¶IP Address of the database server.
Allowed: any valid IP address
username
¶Username to access the database.
Allowed: Any Valid Username
password
¶Password to access the database.
Allowed: Any Password
database
¶Database name to store the alerts.
Allowed: database name
type
¶Type of database (Mysql or PostgreSQL).
Note
OSSEC must be compiled with the database type that is to be used.
Allowed: mysql/postgresql