Yes, I use the hybrid mode quite a bit too. It basically automates the process of installing the local + agent without having to do both separately.
thanks, On Thu, Feb 18, 2016 at 2:10 PM, Kat <uncommon...@gmail.com> wrote: > I use Hybrid modes for 1000s of agents and mixed managers. It allows me to > distribute managers, and still have centralized collection. If I lose the > WAN, the hybrids continue to process alerts, and once the WANs are > restored the data resumes to the central host. They have proven to be > extremely reliable and I have had no issues. I do run with as high as > 20,000 agents in some cases with no issues. > > Cheers > Kat > > > On Thursday, February 18, 2016 at 7:36:10 AM UTC-8, James Dough wrote: >> >> Looking at the hybrid install type; it installs two versions of ossec, >> that have been reduced. One server role and one agent role. >> >> Is the hybrid as reliable? I don't see nearly as much documentation on >> it. Is it a safer bet to go with dual install? >> >> -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.