On Wed, Jul 27, 2011 at 9:02 AM, gopal krishnan <[email protected]> wrote: > In OSSEC Manager i need to create some groups and add ossec agents into that > groups for Display and easy maintenance the ossec agents in UI, > > UI we are using Splunk WUI, integrated ossec with splunk, In splunk there is > a option called List Agents, If i click list agents it will display all the > agents together, rather than dislaying all the agents together, I want to > split the agents and group them into one particular group, > > I don't want ossec agents to be listed all together in one list, > > Like this i am planning, > > Production-APP: (Group Name) > 1. Ossec-Agent1 > 2. Ossec-Agent2 > 3. etc.., > > Production-Web: > 1. Ossec-Agent3 > 2. Ossec-Agent4 > 3. etc.., > Linux: > 1. Ossec-Agent5 > 2. Ossec-Agent6 > 3. etc.., > > Is there any way to do this? >
It sounds like you need to look into splunk. There's no way to group them like this in OSSEC's command line applications. > Thanks, > -Gopal.C > > On Tue, Jul 26, 2011 at 2:17 PM, dan (ddp) <[email protected]> wrote: >> >> What do you mean by "group" them? In what? >> >> On Tue, Jul 26, 2011 at 10:42 AM, gopal krishnan >> <[email protected]> wrote: >> > Hi Dan, >> > >> > I need a help on how to group the OSSEC agents? >> > >> > For Example, >> > >> > I have a OSSEC server already installed and up >> > >> > Now i want to install OSSEC agents on nearly 300 servers >> > >> > I want to group all these agents like the following, >> > >> > Production Application >> > Production Web >> > Production SQL >> > Production Oracle >> > Stage Application >> > Stage Web >> > >> > and samething for test environment also. >> > >> > Please provide me the detailed steps on how to make this config. >> > >> > Thanks In Advance! >> > -Gopal.C > >
