Hi, I've been going round in circles in your help file and I can't for the life of me get the ODBC logging working. I can't even tell if the product is doing anything at all.
I gather from the quick setup help that I need to make a ruleset first. OK, I go to RuleSets, Add, give it a name "new ruleset", Database Logging.
Then I go to Rulesets, "new ruleset", Actions. I set up a system dsn and enter the dsn name in the box that says dsn. I hit save.
Now I go to Services, Default syslog listener. I change the ruleset to use to "new ruleset" and hit save.
Then I restart the default syslog listener.
Now what? I checked the mdb file I defined in the dsn and it's empty. no tables, nothing.
I have cicso pix that's configured to send trap messages to my computer running syslog. I know it's working because if I open the Interactive syslog server I can see messages coming in.
what's the next step? which option have I not clicked? nothing is happening as far as I can tell. I've also tried file logging but no logfiles are being created. This product is pretty confusing....


