A good tool for this kind of problem is nagios, you can write an nrpe script that queries for the ossec agent process on your clients. Or you could write a local script that checks for that, and sends you an email if that process isn't running. I can give you some similar samples if you need them. bil
On Monday, June 10, 2013 4:29:26 AM UTC-4, Amritha Kumar wrote: > > Hi, > > I have installed ossec server on a Red Hat linux machine and have 30 > agents installed on both linux and windows machines. The ossec.conf file > has the default settings in it and i have also configured email alerts. i > have noticed in many occasions that the agent goes down and i don't get to > know about it at all. So please tell me how to configure email alerts to be > generated if any one of the installed agent is down or not communicating > with the ossec server for a long period of time like 24 hours. > > Thanks > Amritha > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
