From: John Creegan (jcreeganquestarweb.com)
Date: Wed Sep 22 2004 - 13:49:01 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

You can do this with just one ACID db, assuming that everyone is looking for alerts that do not cross purposes. If not, you could certainly create then populate clones of the ACID db and configuration page, point the ACID configuration page clones to new db's, then point your browser at the clone pages. Still, this seems like a bit more work than it seems you need. And, you'd still have to get the archive done before you replicate to the clone db's.

Have you considered ACID alert groups?

>>> Jason Alexander <listsitsecurity3.its.uiowa.edu> 09/22/04 10:43AM >>>
Is is possible to have barnyard output to multiple databases at once. I
would like to have a database that everyone can look at and remove
alerts once they have been process but would like to keep an archive
database of everything that was logged for reference.

Thanks
Jason

-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

This message (including any attachments) contains confidential
information intended for a specific individual and purpose,
and is protected by law. If you are not the intended recipient,
you should delete this message and are hereby notified that any
disclosure,copying, or distribution of this message, or the taking
of any action based on it, is strictly prohibited.

-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]