Hi all, We have multiple sites which have a small number of hosts and we wanted to monitor them from our HQ via a central OSSEC server. Question: what ports do we need to have accessible from HQ and from each individual remote site? The documentation states port 1514 but is this catered specifically to syslog?
Any advice is much appreciated. Thanks, George
