# # Because SEC usage varies so widely from user to user, it is configured by # default to not run. Please read `sec --help` for valid options to use in # this configuration directive, or use the sample defaults included below. # # If you would like to run multiple instances of sec in order to track more # than one log file, you can use also use $SEC_OPTIONS as an array. # # Also, please don't forget to read the sec man page or look at the # configuration options for /etc/sec/. # # # Default: # # SEC_ARGS="-detach -conf=/etc/sec/*.sec -input=/var/log/messages -log=/var/log/sec -intevents -pid=/var/run/sec.pid" # # # For Multiple instances of SEC, use something like: # # SEC_ARGS[0]="-detach -conf=/etc/sec/sys/*.sec -input=/var/log/messages -log=/var/log/sec -intevents -pid=/var/run/sec.sys.pid" # # SEC_ARGS[1]="-detach -conf=/etc/sec/mail/*.sec -input=/var/log/messages -log=/var/log/sec -intevents -pid=/var/run/sec.mail.pid" #