Hi, Yeah had a friend running it on ubuntu, grep'd through his setup and found the file and syntax and edited my one, works fine now.
regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 ________________________________________ From: [email protected] [[email protected]] on behalf of treydock [[email protected]] Sent: Thursday, 17 November 2011 4:54 a.m. To: ossec-list Subject: [ossec-list] Re: rpm agent howto set it up to a remote ossec server On Nov 15, 5:27 pm, thing <[email protected]> wrote: > Hi, > > I just installed the agent and server via rpm to a RHEL6 setup, > however when I run the scripts in ~bin to configure the agent on the > remote RHEL box it does not ask me for the server IP. > > There seems to be no man page etc....how do I setup the agent to point > at my remote control server? or what file do I hack? > > Can the install doc be improved please to fill this gap, thanks. Where did you get the RPM from? Depending on which RPM you use the file may be ossec-agent.conf or ossec.conf (which may also sym link to each other). On the agent you edit either etc/ossec-agent.conf or etc/ossec.conf This is the contents of mine, since I use agent.conf configurations I only have the server's IP (changed in example). <ossec_config> <client> <server-ip>192.168.1.1</server-ip> </client> </ossec_config> That should be the only step required before running the bin/ item to import the agent's key. - Trey
