Hi George, Put the Windows and *nix configurations in the same agent.conf. The agents will ignore the parts that do not apply to them.
On Fri, Jun 10, 2011 at 4:01 AM, GeorgeY <[email protected]> wrote: > Hi all, > > I am using a shared config for Windows hosts that is being distributed > from the OSSEC server /ossec/etc/shared/agent.conf. > > In agent.conf, I have specified the following: > > <agent_config os="Windows"> > ... > ... > </agent_config> > > It is distributing it as expected however, I noticed that this file is > being distributed to my Unix hosts as well. How can I tell the OSSEC > server to distribute agent.conf to ALL windows hosts and tell it to > distribute agent-unix.conf to ALL unix hosts only? Can this be done? > > Thanks in advance. > > George
