<?xml version="1.0" encoding="UTF-8"?>
<template_config os="FreeBSD" profile="%%LOGS_OSSEC_PROFILE%%">

  <localfile>
    <log_format>syslog</log_format>
    <location>%%OSSEC_HOME%%/logs/active-responses.log</location>
  </localfile>

</template_config>

<template_config os="Linux" profile="%%LOGS_OSSEC_PROFILE%%">

  <localfile>
    <log_format>syslog</log_format>
    <location>/var/ossec/logs/active-responses.log</location>
  </localfile>

</template_config>
