Hi,
Just install server and windows agent as described in the manual (http://www.ossec.net/en/manual.html#windows) Then please be sure that windows_rules.xml file is included in ossec.conf file. That's all you need to do to process your windows agent's event logs on the server. Regards, Ahmet Ozturk. Oyesanya, Femi wrote:
Hello:Does anyone know what I need to do to have ossec server process windows event logs and send alerts ?Thanks
