When running an On-Access or On-Demand scan, VSEL can be configured to log detections to Syslog.
Use the following steps to configure VSEL to write detections to Syslog, and verify this configuration is working with the On-Access Scanner.
- Log in to the VSEL interface.
- Click General Settings.
- Click Edit.
- Select the box beside Additionally log to syslog.
- Change the detail level for SYSLOG to NORMAL from the drop-down list.
- Save your changes.
- Download the EICAR test file (http://www.eicar.org/85-0-Download.html). EICAR is a test file, not real malware. When you attempt to copy this file to any location, it will immediately be quarantined.
- Check the appropriate log file for real-time detection logging:
- For Ubuntu distributions, execute the following command:
tail -f /var/log/syslog
- For all other distributions, execute the following command:
tail -f /var/log/messages
For On-Demand Scanning, replicate the previous steps, but create and run a VSEL On-Demand Scan task (rather than On-Access).
