On Fri, Sep 21, 2018 at 5:38 PM <[email protected]> wrote: > > Hi, > > I have a server with two interfaces and I need configure OSSEC in specific > interface, but i found the conf only the server. > Anyone have suggest about this issue? > In my server I was set local_ip, but on agent I'dont found anything on > documentation or web. >
The system should be able to route these messages properly. If you have 2 IPs in the same subnet or something, you can probably set a static route for the OSSEC server. Something like this maybe (TOTALLY UNTESTED, eth0 is the interface you want it coming from): route add -host 10.10.10.10/32 dev eth0 > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
