So if I set my server-side agent.conf file with <agent_config name"XXXX"> for all my agents,
And have a list of all my agents, with local files, & directories to monitor, directories to ignore, will it do just that for all my agents? Or do I have to copy all of this over to each agent.conf file located on each agent's server? Also, what takes precedence - agent.conf or ossec.conf located on the agent? Or is agent.conf used to guide the agent to search through specific files/dirs and the ossec.conf is for the rootcheck & ignores, ect. If I edit the agent.conf file server side - it doesn't update the agent.conf file on the agent side? Same goes for ossec.conf? I'm getting more and more confused lol. Do you have an efficient, preferred way of setting all this up? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
