Sorry it was a double post on my behalf. I didn't realise the posts needed to be approved, so when I didn't see my first one, I reposted. n00b FTL!
On Wednesday, August 1, 2012 11:05:51 PM UTC+10, dan (ddpbsd) wrote: > > On Tue, Jul 31, 2012 at 11:17 PM, Patrick <[email protected]> wrote: > > We are looking at deploying OSSEC in our environment and due to our > separate > > LAN segments we will deploy OSSEC servers as aggregation points for each > > segment > > > > We need to have a central OSSEC for all the aggregation points to report > to > > so the deployment will look like this Many OSSEC Agents -> Many OSSEC > > Servers -> One OSSEC server. > > > > Is this deployment supported/achievable? > > > > Any help would be greatly appreciated. > > > > > > Popular question. > > The latest development code has a "hybrid" mode, which is a > combination server + agent. It's intended use is for this type of > setup. >
