Hi,
Is this os match based on the line that we would see with agent_control -i ?
If so, then Windows 2003 probably won't work, as the actual line is:
Microsoft Windows Server 2003, Standard Edition Serv..
In that case, I should use:
agent_config os=Windows XP|Windows Server 2003
???
-Original Message-
From: ossec-list@googlegroups.com [mailto:ossec-l...@googlegroups.com] On
Behalf Of Daniel Cid
Sent: Thursday, October 21, 2010 1:08 PM
To: ossec-list@googlegroups.com
Subject: Re: [ossec-list] agent.conf by OS version?
Hi Jefferson,
Yes, you can. Just add the following to the agent config:
agent_config os=Microsoft Windows XP Home Edition Service Pack 3
..
/agent
And it will match only on XP with SP3. You can also do:
agent_config os=Windows XP|Windows 2003
..
/agent
To match only on XP and 2003.
thanks,
On Thu, Oct 21, 2010 at 1:30 PM, Jefferson, Shawn
shawn.jeffer...@bcferries.com wrote:
Anyway to specify an agent config by the OS? full_command doesn't work on
Windows 2000 (yes, I know old...). Currently I have a netstat command for
windows, but would like to restrict it to only windows 2003/2008, etc... and
exclude windows 2000 machines.
