new upstream release (3.3.0); modify package compatibility for Stretch
[ossec-hids.git] / debian / ossec-hids / usr / share / doc / ossec-hids / contrib / add_localfile.sh
diff --git a/debian/ossec-hids/usr/share/doc/ossec-hids/contrib/add_localfile.sh b/debian/ossec-hids/usr/share/doc/ossec-hids/contrib/add_localfile.sh
new file mode 100644 (file)
index 0000000..a35958c
--- /dev/null
@@ -0,0 +1,41 @@
+#!/bin/sh
+# Add a localfile to ossec.
+# by Daniel B. Cid - dcid ( at ) ossec.net
+
+FILE=$1
+FORMAT=$2
+
+if [ "X$FILE" = "X" ]; then
+    echo "$0: <filename> [<format>]"
+    exit 1;
+fi
+
+if [ "X$FORMAT" = "X" ]; then
+    FORMAT="syslog"
+fi
+
+# Checking if file is already configured
+grep "$FILE" /var/ossec/etc/ossec.conf > /dev/null 2>&1
+if [ $? = 0 ]; then
+    echo "$0: File $FILE already configured at ossec."
+    exit 1;
+fi
+
+# Checking if file exist
+ls -la $FILE > /dev/null 2>&1
+if [ ! $? = 0 ]; then
+    echo "$0: File $FILE does not exist."
+    exit 1;
+fi     
+    
+echo "
+<ossec_config>
+  <localfile>
+    <log_format>$FORMAT</log_format>
+    <location>$FILE</location>
+  </localfile>
+</ossec_config>  
+" >> /var/ossec/etc/ossec.conf
+
+echo "$0: File $FILE added.";
+exit 0;