--- /dev/null
+#!/bin/sh
+# Add a localfile to ossec.
+# by Daniel B. Cid - dcid ( at ) ossec.net
+
+FILE=$1
+FORMAT=$2
+
+if [ "X$FILE" = "X" ]; then
+ echo "$0: <filename> [<format>]"
+ exit 1;
+fi
+
+if [ "X$FORMAT" = "X" ]; then
+ FORMAT="syslog"
+fi
+
+# Checking if file is already configured
+grep "$FILE" /var/ossec/etc/ossec.conf > /dev/null 2>&1
+if [ $? = 0 ]; then
+ echo "$0: File $FILE already configured at ossec."
+ exit 1;
+fi
+
+# Checking if file exist
+ls -la $FILE > /dev/null 2>&1
+if [ ! $? = 0 ]; then
+ echo "$0: File $FILE does not exist."
+ exit 1;
+fi
+
+echo "
+<ossec_config>
+ <localfile>
+ <log_format>$FORMAT</log_format>
+ <location>$FILE</location>
+ </localfile>
+</ossec_config>
+" >> /var/ossec/etc/ossec.conf
+
+echo "$0: File $FILE added.";
+exit 0;