Configuration for the ossec server is generally done in ossec.conf. Try: <event_location>qwerty</event_location> where qwerty is the agent name of the system sending the alert.
On Thu, Jun 24, 2010 at 4:01 AM, Mathieu D <[email protected]> wrote: > Thank you the tutorial is unfortunately very small. > Do you know in which file I have to configure this ? (its not mentioned) > And what is the commend to filter per host ? ( on the tuto only rule_id, > format and level are mentioned as filter) > Thank you again ! :) >
