On Mon, Nov 8, 2010 at 6:00 PM, jplee3 <[email protected]> wrote: > One more follow-up question on agent.conf > > If I assign an agent config grouped by name <agent_config > name="machineA|machineB"> and also create an agent config grouped by > OS <agent_config OS="Linux">, and machineA|machineB are both Linux > machines, will the agent configs for name AND OS go into effect > (duplicate configs) for those machines that have that kind of overlap? >
>From the bit of testing I've done, a machine will squish all of the appropriate configs together and use that. MachineA, which runs linux will use both the Linux and MachineA configs. > On Sep 28, 10:20 am, "dan (ddp)" <[email protected]> wrote: >> On Tue, Sep 28, 2010 at 1:31 PM, Jeremy Lee <[email protected]> wrote: >> > That makes sense. I guess what I'd really want to see the option to >> > push/update just a single 'config' file (ossec.conf) to all clients :) >> >> If the only configuration you do in the ossec.conf is the server IP, >> then pushing out the agent.conf is basically what you're asking for.
