No, they each have their own ossec.conf. There is some centralized management available though: http://www.ossec.net/main/manual/centralized-config/
On Tue, Oct 27, 2009 at 1:00 PM, Al Cloman <[email protected]> wrote: > > I have deployed a server with agents. > > 1. Does the ossec.conf on the host control all the agents (ie. what > files to look at, how frequent to scan, what to ignore, where to > email) > 1A. If the agents are controlled how do I force them to take the > rules from the host ossec.conf > 1B If NO, is there anyway I can get them to read one ossec.conf > > 2. What is the best soultion to have them reading one ossec.conf >
