George, It is much easier to do this with a centralized agent configuration. Take a look here.
http://www.ossec.net/main/manual/centralized-config/ You can put just about the complete config in etc/shared/agent.conf so that it is rolled out to all hosts. On Fri, Dec 3, 2010 at 01:55, GeorgeY <[email protected]> wrote: > Hi all, > > Please excuse my ignorance, we are starting to mass deploy OSSEC on > Windows as well as Solaris hosts. If, for example, after a couple of > months, we would like to change certain settings in ossec.conf, how > can we propagate the changes to all hosts? > > 1. Can we simply copy and paste it over the existing and restart the > service? > 2. Can we deploy it from the central server out to all connected > hosts? > > Thanks in advance. > -- Registered Linux User # 379282
