After creating new rules, you need to restart the OSSEC server. And it's also a good idea to restart the OSSEC agent. No need to put the rules on every agent individually (at least in a server-agent setup)
On Wed, Jan 26, 2011 at 8:29 AM, satish patel <[email protected]> wrote: > Hello Everyone, > > I am impressed with OSSEC and want to dive in deep. I am a question > regarding centralization of OSSEC managment server, Just want to know if i > create new rules at server it will automatically will apply on all my agent > right ? or do i put that rules on every agent individually (which would be > painful) > > Appreciate your help > > Thanks, > S >
