hi
do you forget do change
<active-response>
<disabled>no</disabled>
</active-response>
in the agent ?
----- Mail original -----
De: "Александр Чалый" <[email protected]>
À: [email protected]
Envoyé: Jeudi 20 Février 2014 10:45:04
Objet: [ossec-list] Ossec active-response
Hello!
I have tried to implement OSSEC HIDS system in my network. And everything about
notification is ok. But active-response rules dont't do.
As I see some Alert in alert.log after that I expect action, but no actions
(((.
Can you help me?
Regards,
Alexander Chaliy
mobile: +38 097 102 45 83
mail: [email protected]
skype: achaliy
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out .
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
