***********************************
         * !!!!!!!!!!! WARNING !!!!!!!!!!! *
         ***********************************

If you had existing config files in %%PREFIX%%/etc/%%SGUILDIR%%
they were not overwritten.  If this is a first time install, you
must copy the sample files to the corresponding conf file and 
edit the various config files for your site.  See the INSTALL
doc in %%DOCSDIR%% for details.  If this is an upgrade, replace
your existing conf file with the new one and edit accordingly.

The sql scripts for creating database tables were placed in
the %%PREFIX%%/share/%%SGUILDIR%%/ directory.  PLEASE 
NOTE: LOG_DIR is not set by this install.  You MUST create the 
correct LOG_DIRS and put a copy of the snort rules you use in 
LOG_DIR/rules.

The sguild program was placed in %%PREFIX%%/bin/.

Some contributed scripts were placed in 
%%PREFIX%%/share/%%SGUILDIR%%/contrib

A startup script, named sguild.sh was installed in
%%PREFIX%%/etc/rc.d/.  To enable it, edit /etc/rc.conf
per the instructions in the script.

NOTE:  Sguild now runs under the sguil user account not root!

For general questions, see the sguil faq: 
http://www.vorant.com/nsmwiki/Sguil_FAQ or visit the nsm wiki:
http://www.vorant.com/nsmwiki/Main_Page

For detailed install instructions see Richard Bejtlich's
excellent guide at his blog: 
http://taosecurity.blogspot.com/2006/03/new-sguil-scripts-and-vm-i-have-not.html