The OSSEC server is running Redhat EL v5. I was wondering that when it executes an active response rule what user is it running as?
I'm trying to build a script that will log into a MySql database and record the Src IP and would like to setup a pre-shared key for the user between the two systems. thanks
