On Mon, Aug 14, 2017 at 11:47 AM, leroy.tennison
<[email protected]> wrote:
> If documentation exists I haven't found it. setup-windows wants a directory
> name and, when supplied, "processes" the directory (whatever that means,
> lots of messages scroll by but nothing changes in ossec.conf).
> setup-syscheck wants a directory followed by enable or disable but, when
> run, reports "OSSEC not installed yet. Exiting". I am running the command
> prompt as Administrator. Tried /? and /help but got errors. Wondering
> about add-localfile, ossec-lua[c] and ossec-rootcheck as well.
>
> Can anyone explain what these programs do and how to use them? Thanks.
>
I think setup-windows.exe is run after the installation. It does stuff
like set OSSEC to start on startup:
/* Configure OSSEC for automatic startup */
system("sc config OssecSvc start= auto");
setup-syscheck.exe I guess enabled or disables syscheck, which seems
awfully complicated for something so simple.
add-localfile can add a log file to the ossec.conf for monitoring
The source for these can be found in src/win32.
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/d/optout.
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
