Hello,
Don’t know if this was asked before but is there a way to forward the IPS logs to an external syslog server (Graylog in this situation)?.
Thanks.
Not exactly what your looking for … but
Sending my IDS logs by email
There is a section on remote logging in the following wiki page