We are using a VIP client for failover. Is there a way to bind the OSSEC.conf file to an IP address. I have searched and seen in the following
http://www.ossec.net/main/manual/configuration-options/ However this shows th ip option. Is there anyway to do this OSSEC SERVER (primary) - 192.168.152.3 OSSEC SERVER (backup) - 192.168.152.2 VIP CLIENT - 192.168.152.1 We point everything at x.x.152.1 and it bounces to the primary or the back up if the primary is down.
