Please review the web site and manual before posting.
http://www.ossec.net/main/manual/centralized-config/ On Tue, 27 Oct 2009 10:00:19 -0700 (PDT), Al Cloman <[email protected]> wrote: > > I have deployed a server with agents. > > 1. Does the ossec.conf on the host control all the agents (ie. what > files to look at, how frequent to scan, what to ignore, where to > email) > 1A. If the agents are controlled how do I force them to take the > rules from the host ossec.conf > 1B If NO, is there anyway I can get them to read one ossec.conf > > 2. What is the best soultion to have them reading one ossec.conf
