Re: [ossec-list] Re: OSSEC profile by regex

2015-02-12 Thread Christian Hettler
Hello Ricardo, you can use agent_config name=hostA01|hostA02|hostA03 [...] /agent_config agent_config name=hostB01|hostB02|hostB03 [...] /agent_config Christian On Wed, Feb 11, 2015 at 10:11:34AM -0800, Ricardo Perre wrote: The feature is selecting config based on the name, but not the

Re: [ossec-list] Re: OSSEC profile by regex

2015-02-11 Thread Ricardo Perre
The feature is selecting config based on the name, but not the exact name but rather a regular expression. Scenario: OSSEC server with X VM's connected to it. *agent.conf:* agent_config name=*REGEX1* localfile location/var/log/my1.log/location log_formatsyslog/log_format

Re: [ossec-list] Re: OSSEC profile by regex

2015-02-11 Thread dan (ddp)
On Wed, Feb 11, 2015 at 1:11 PM, Ricardo Perre rjmpe...@gmail.com wrote: The feature is selecting config based on the name, but not the exact name but rather a regular expression. Scenario: OSSEC server with X VM's connected to it. agent.conf: agent_config name=REGEX1 localfile

[ossec-list] Re: OSSEC profile by regex

2015-02-11 Thread Ricardo Perre
Hello, I've tested the config, it doesn't work. I haven't tested the profile settings, I was aiming to manage clients in a different way. I have a hypervisor with ~100 VM's on it, if I could differentiate the OSSEC config based on the name I wouldn't have to worry about setting a profile. Is

Re: [ossec-list] Re: OSSEC profile by regex

2015-02-11 Thread dan (ddp)
On Wed, Feb 11, 2015 at 12:56 PM, Ricardo Perre rjmpe...@gmail.com wrote: Hello, I've tested the config, it doesn't work. I haven't tested the profile settings, I was aiming to manage clients in a different way. I have a hypervisor with ~100 VM's on it, if I could differentiate the OSSEC