On Tue, Jul 31, 2012 at 11:17 PM, Patrick <[email protected]> wrote: > We are looking at deploying OSSEC in our environment and due to our separate > LAN segments we will deploy OSSEC servers as aggregation points for each > segment > > We need to have a central OSSEC for all the aggregation points to report to > so the deployment will look like this Many OSSEC Agents -> Many OSSEC > Servers -> One OSSEC server. > > Is this deployment supported/achievable? > > Any help would be greatly appreciated. > >
Popular question. The latest development code has a "hybrid" mode, which is a combination server + agent. It's intended use is for this type of setup.
