##########################################################################
# $Id: eventlog.conf,v 1.1 2007/04/28 22:50:24 bjorn Exp $
##########################################################################
# $Log: eventlog.conf,v $
# Revision 1.1  2007/04/28 22:50:24  bjorn
# Added files for Windows Event Log, by Orion Poplawski.  These are for
# Windows events logged to a server, using Snare Agent or similar.
#
##########################################################################

# What actual file?  Defaults to LogPath if not absolute path....
LogFile = eventlog

# If the archives are searched, here is one or more line
# (optionally containing wildcards) that tell where they are...
# Note: if these are gzipped, you need to end with a .gz even if
#       you use wildcards...
#If you use a "-" in naming add that as well -mgt
Archive = eventlog.*
Archive = eventlog.*.gz
Archive = archiv/eventlog.*
Archive = archiv/eventlog.*.gz

# Expand the repeats (actually just removes them now)
*ExpandRepeats

# Now, lets remove the services we don't care about at all...
#*RemoveService = talkd

# Keep only the lines in the proper date range...
*OnlyHost
*ApplyStdDate

# vi: shiftwidth=3 tabstop=3 et