Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Can I configure argus to write output to more than one file?

April 26, 2017Argus configure file output write

0

Posted

Can I configure argus to write output to more than one file?

1 Answer

0

Posted

Yes, Argus supports writing to up to 5 outputs, mixed between output files and remote sockets. And each file can have its own independant filter. If you want all TCP transaction audits to go into a TCP output file, and all other records to go to another file, no problem. argus -w tcp.file “tcp” -w nottcp.file “not tcp” In the argus.conf file, you can have upto 5 ARGUS_OUTPUT_FILE entries.