Hi,

Is this os match based on the line that we would see with agent_control -i ?  
If so, then Windows 2003 probably won't work, as the actual line is:

Microsoft Windows Server 2003, Standard Edition Serv..

In that case, I should use:
<agent_config os="Windows XP|Windows Server 2003">

???

-----Original Message-----
From: [email protected] [mailto:[email protected]] On 
Behalf Of Daniel Cid
Sent: Thursday, October 21, 2010 1:08 PM
To: [email protected]
Subject: Re: [ossec-list] agent.conf by OS version?

Hi Jefferson,

Yes, you can. Just add the following to the agent config:

<agent_config os="Microsoft Windows XP Home Edition Service Pack 3">
..
</agent>

And it will match only on XP with SP3. You can also do:

<agent_config os="Windows XP|Windows 2003">
..
</agent>

To match only on XP and 2003.

thanks,
On Thu, Oct 21, 2010 at 1:30 PM, Jefferson, Shawn
<[email protected]> wrote:
> Anyway to specify an agent config by the OS?  full_command doesn't work on 
> Windows 2000 (yes, I know old...).  Currently I have a "netstat" command for 
> windows, but would like to restrict it to only windows 2003/2008, etc... and 
> exclude windows 2000 machines.
>
>
>

Reply via email to