On Wed, 26 Jan 2011 16:29:51 +0000, satish patel
<[email protected]> wrote:
Hello Everyone,
I am impressed with OSSEC and want to dive in deep. I am a question
regarding centralization of OSSEC managment server, Just want to know
if i create new rules at server it will automatically will apply on
all my agent right ? or do i put that rules on every agent
individually (which would be painful)
Appreciate your help
Thanks,
S
Right, rules are only configured and apply on the manager. All logs are
sent to the manager from the agents, at which point they are
pre-decoded, decoded and evaluated with rules.
--
Michael Starks
[I] Immutable Security
http://www.immutablesecurity.com
