Daniel Cid avatar Daniel Cid committed b43989e

Not storing keepalives on archive.log

Comments (0)

Files changed (2)

src/analysisd/alerts/log.c

  */
 void OS_Store(Eventinfo *lf)
 {
+
+    if(strcmp(lf->location, "ossec-keepalive") == 0)
+    {
+        return;
+    }
     fprintf(_eflog,
             "%d %s %02d %s %s%s%s %s\n",
             lf->year,

src/logcollector/read_ossecalert.c

         char *tmp_msg = NULL;
         short int j = 0;
         
-        tmp_msg = os_LoadString(tmp_msg, al_data->log[0]);
-        if(tmp_msg == NULL)
-        {
-            FreeAlertData(al_data);
-            return(NULL);
-        }
         while(al_data->log[j] != NULL)
         {
             tmp_msg = os_LoadString(tmp_msg, al_data->log[j]);
+            tmp_msg = os_LoadString(tmp_msg, "\n");
             if(tmp_msg == NULL)
             {
                 FreeAlertData(al_data);
Tip: Filter by directory path e.g. /media app.js to search for public/media/app.js.
Tip: Use camelCasing e.g. ProjME to search for ProjectModifiedEvent.java.
Tip: Filter by extension type e.g. /repo .js to search for all .js files in the /repo directory.
Tip: Separate your search with spaces e.g. /ssh pom.xml to search for src/ssh/pom.xml.
Tip: Use ↑ and ↓ arrow keys to navigate and return to view the file.
Tip: You can also navigate files with Ctrl+j (next) and Ctrl+k (previous) and view the file with Ctrl+o.
Tip: You can also navigate files with Alt+j (next) and Alt+k (previous) and view the file with Alt+o.