Re: [ossec-list] Active-Response on server for remote alerts?

2015-05-26 Thread Santiago Bassett
Weird... Just curious, how did you figure it out? On Tue, May 26, 2015 at 10:29 AM, Xavier Mertens xmert...@gmail.com wrote: FYI, my problem has been solved by reformating the comment in the active-response section: Changed from: !-- comment -- To: !-- comment -- Bug? /x On

Re: [ossec-list] Active-Response on server for remote alerts?

2015-05-26 Thread Xavier Mertens
FYI, my problem has been solved by reformating the comment in the active-response section: Changed from: !-- comment -- To: !-- comment -- Bug? /x On Fri, May 22, 2015 at 3:22 AM, Santiago Bassett santiago.bass...@gmail.com wrote: Not sure if this is of any help, but try to run

[ossec-list] Active-Response on server for remote alerts?

2015-05-21 Thread Xavier Mertens
Hi, I don't often write to the group (I'm following it closely) but today, I've a question... I'd like to trigger an Active-Response script on the _server_ for _any_ alert (ex with level 10). I don't want to deply the script on all agents. At the moment, here is my active-response config (for