One more follow-up question on agent.conf If I assign an agent config grouped by name <agent_config name="machineA|machineB"> and also create an agent config grouped by OS <agent_config OS="Linux">, and machineA|machineB are both Linux machines, will the agent configs for name AND OS go into effect (duplicate configs) for those machines that have that kind of overlap?
On Sep 28, 10:20 am, "dan (ddp)" <[email protected]> wrote: > On Tue, Sep 28, 2010 at 1:31 PM, Jeremy Lee <[email protected]> wrote: > > That makes sense. I guess what I'd really want to see the option to > > push/update just a single 'config' file (ossec.conf) to all clients :) > > If the only configuration you do in the ossec.conf is the server IP, > then pushing out the agent.conf is basically what you're asking for.
