Move OSSEC Logs to a different mount point

[Evan Prohaska]

I want to move the logs on the Server portion of the deployment. I was able to move the indexer file location by following a guide posted by the dev's but I am unable to find anything related to moving the server logs.

Thanks!

[tomas....@wazuh.com]

Hi Evan,

I see that you already asked the same question in our Slack channel.

As my teammate Victor said, you can mount /var/ossec/logs/ as a bind to another folder. This is the only option you have since that path is not configurable, but we are working to make it configurable in future versions. Check this issue for more details.

I hope this information helps.