<localfile>

<log_format>mysql_log</log_format>

<location>/var/log/yourlogfile.log</location>

</localfile>

Restart ossec and it should start reading your mysql logs now. Anyone have additional rules to add in for mysql?

I’ve been working with linux a bit and trying to make a list of things that are holding it back from being a windows replacement. I think linux is very cool and a good tool for certain jobs. If any linux peeps happen to stop by, maybe you can get to work. I’d like to see a lot of things work in a GUI. If you are going to try to make your OS compete with a GUIfied OS, you are going to have to make your tools work with a pretty GUI. Some people work better with text, some work better with gui. Different learning styles and data presentation options don’t really make one person “smarter” than the other if the end result is the same job is done.

1. Gui permissions – In fedora and ubuntu, editing permissions on a gui is about impossible. Stupid users can barely handle permissions in the first place, they aren’t going to work it out at the command line.

2. Patches – MS is onto something good with patch tuesdays. I would like to see a standard day of the month for updates that are not critical.

3. resolution in VMs for fedora – I can’t get the resolution bigger in a vmware fedora 8 box to change for the life of me. It shouldn’t be hard. Video always seems to be a problem in linux. Some of the biggest troubleshooting sessions I’ve watched with my linux coworkers is in this area.

4. remote access to a gui – remote desktop solutions in windows are so easy. Catch up!

5. Games – pick up a copy of a linux magazine and look at the latest cool games. This is what draws in the young crowd and starts up the learning. I was just looking at a new game in Linux Format. They are excited about Eschalon Book 1????? Come on.

There is a big chicken and egg problem with all of these but I think the start is with the support in the OS before the demand and use numbers creep up.