John Lewis wrote: > It would be useful to be able to put in a DNS name for a server here > rather than IP in the <server-ip> section of ossec.conf, and have the > agent resolve to the IP associated with that name. This would allow us > to change the server’s IP without having to update all the agents…
Hello John, That's already a feature in OSSEC. The option you're looking for is <server-hostname>. HTH. -- Michael Starks [I] Immutable Security http://www.immutablesecurity.com Information Security, Privacy and Personal Liberty
