On 06/09/2010 04:24 PM, ASR wrote:
Is ossec.conf file mandatory for running OSSEC agent? I want to keep all the configurations on agent.conf and not keep anything in the local config file.
You need the ossec.conf to, at a minimum, tell the agent where the server is. I have only that and a line to enable active responses in my ossec.conf. Everything else is in agent.conf.
-- Michael Starks [I] Immutable Security http://www.immutablesecurity.com
