In OSSEC Manager i need to create some groups and add ossec agents into that
groups for Display and easy maintenance the ossec agents in UI,
UI we are using Splunk WUI, integrated ossec with splunk, In splunk there is
a option called List Agents, If i click list agents it will display all the
agents together, rather than dislaying all the agents together, I want to
split the agents and group them into one particular group,
I don't want ossec agents to be listed all together in one list,
Like this i am planning,
Production-APP: (Group Name)
1. Ossec-Agent1
2. Ossec-Agent2
3. etc..,
Production-Web:
1. Ossec-Agent3
2. Ossec-Agent4
3. etc..,
Linux:
1. Ossec-Agent5
2. Ossec-Agent6
3. etc..,
Is there any way to do this?
Thanks,
-Gopal.C
On Tue, Jul 26, 2011 at 2:17 PM, dan (ddp) <[email protected]> wrote:
> What do you mean by "group" them? In what?
>
> On Tue, Jul 26, 2011 at 10:42 AM, gopal krishnan
> <[email protected]> wrote:
> > Hi Dan,
> >
> > I need a help on how to group the OSSEC agents?
> >
> > For Example,
> >
> > I have a OSSEC server already installed and up
> >
> > Now i want to install OSSEC agents on nearly 300 servers
> >
> > I want to group all these agents like the following,
> >
> > Production Application
> > Production Web
> > Production SQL
> > Production Oracle
> > Stage Application
> > Stage Web
> >
> > and samething for test environment also.
> >
> > Please provide me the detailed steps on how to make this config.
> >
> > Thanks In Advance!
> > -Gopal.C
>
