[ossec-list] Re: active-response to multiple hosts

[Peter M. Abraham]

Greetings:

Yes; use the client/server installation, and then on the server in /
var/ossec/etc/ossec.conf use

<location>all</location>

For the active-response.

Thank you.