Ah ok got it, thanks!! On Friday, April 7, 2017 at 5:00:11 PM UTC-7, dan (ddpbsd) wrote: > > On Fri, Apr 7, 2017 at 7:30 PM, Rob Williams <[email protected] > <javascript:>> wrote: > > Hello, > > > > I assume this should be pretty simple but I've been troubleshooting an > > Active Response I setup with a custom script and rules/decoders. > Everything > > looks it it should be operating correctly, but I could not get it work. > > After checking an agent, I'm realizing the custom script in > > active-response/bin/ that I created is not on the agent. How would I go > > about passing this? This is the first time I've created a custom script > and > > I can't seem to find any documentation on this in particular. > > > > You have to add it to the agent manually. Anything from scp to > puppet/ansible/chef to dragging the script from a file share. > > > Thanks, > > Rob > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/d/optout. >
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
