On Fri, Sep 17, 2010 at 2:12 PM, jplee3 <[email protected]> wrote: > Hi all, > > This may have been covered elsewhere, but I can't seem to find it from > my initial searches. Is there a setting in the ossec.conf on the > server to globally enable syscheck, etc? I have 20-25 agents I want to > schedule to run at the same time but it's pretty annoying having to go > through every one of them and making changes to the individual > ossec.conf files. Will the server enforce a 'policy' if it's specified > in the ossec.conf?
You can use the agent.conf for this, but not the server's ossec.conf.
