Is archives.log under /var/ossec/logs/ contains all logs produced at agent host server?I am trying to understand that how OSSEC manager and agent topology works. Agent does not contains rules. Is it mean that agent send all logs to manager and it process log files according to decoder and rule files? Is it logs only processed logs as archives.log? Thanks for reading.
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
