[prev in list] [next in list] [prev in thread] [next in thread]
List: ossec-list
Subject: RE: [ossec-list] ADDING NEW AGENTS IN OSSEC INSTALATION IN LOCAL MODE
From: "dan (ddp)" <ddpbsd () gmail ! com>
Date: 2016-07-21 22:39:41
Message-ID: CAMyQvMrb2JYapgvEbb6tab=pMRDvLdX0jJt2Jye4V_zKAkDUng () mail ! gmail ! com
[Download RAW message or body]
On Jul 21, 2016 6:35 PM, "Adiel Navarro" <adiel.navarro@mail.telcel.com>
wrote:
>
> I found this in the google group.
>
>
>
> What do you think about this?
>
>
I've never tried it. Give it a shot, see what happens.
>
> file /var/ossec/bin/ossec-control, modified next lines:
>
>
>
> DAEMONS="ossec-monitord ossec-logcollector ossec-remoted ossec-syscheckd
ossec-analysisd ossec-maild ossec-execd ${DB_DAEMON} ${CSYSLOG_DAEMON}
${AGENTLESS_DAEMON}"
>
>
>
> SDAEMONS="${DB_DAEMON} ${CSYSLOG_DAEMON} ${AGENTLESS_DAEMON} ossec-maild
ossec-execd ossec-analysisd ossec-logcollector ossec-syscheckd
ossec-monitord ossec-remoted"
>
>
>
>
>
> And on file /var/ossec/etc/ossec.conf, added next lines:
>
>
>
> <remote>
>
>
>
> <connection>secure</connection>
>
>
>
> </remote>
>
>
>
>
>
>
>
> De: ossec-list@googlegroups.com [mailto:ossec-list@googlegroups.com] En
nombre de dan (ddp)
> Enviado el: jueves, 21 de julio de 2016 05:19 p.m.
> Para: ossec-list@googlegroups.com
> Asunto: Re: [ossec-list] ADDING NEW AGENTS IN OSSEC INSTALATION IN LOCAL
MODE
>
>
>
> On Jul 21, 2016 6:17 PM, "Aj Navarro" <ajnavarro1328@gmail.com> wrote:
> >
> > Im installing OSSEC in LOCAL MODE and i have interesting to adding new
agents.
> >
> > How can i do it if the OSSEC Server is in LOCAL MODE?
> > How can i change OSSEC LOCAL MODE to OSSEC SERVER MODE?
> > Its neccesary reinstalling OSSEC in SERVER MODE?
> >
>
> I haven't tried this:
> Backup anything you want to make sure you don't lose, and rerun
install.sh. Then don't do and upgrade and don't delete the install dir.
>
> > --
> >
> > ---
> > You received this message because you are subscribed to the Google
Groups "ossec-list" group.
> > To unsubscribe from this group and stop receiving emails from it, send
an email to ossec-list+unsubscribe@googlegroups.com.
> > For more options, visit https://groups.google.com/d/optout.
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
"ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
email to ossec-list+unsubscribe@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
"ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
email to ossec-list+unsubscribe@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
--
---
You received this message because you are subscribed to the Google Groups \
"ossec-list" group. To unsubscribe from this group and stop receiving emails from it, \
send an email to ossec-list+unsubscribe@googlegroups.com. For more options, visit \
https://groups.google.com/d/optout.
[Attachment #3 (text/html)]
<p dir="ltr"></p>
<p dir="ltr">On Jul 21, 2016 6:35 PM, "Adiel Navarro" <<a \
href="mailto:adiel.navarro@mail.telcel.com">adiel.navarro@mail.telcel.com</a>> \
wrote:<br> ><br>
> I found this in the google group.<br>
><br>
> <br>
><br>
> What do you think about this?<br>
><br>
> </p>
<p dir="ltr">I've never tried it. Give it a shot, see what happens.</p>
<p dir="ltr">><br>
> file /var/ossec/bin/ossec-control, modified next lines:<br>
><br>
> <br>
><br>
> DAEMONS="ossec-monitord ossec-logcollector ossec-remoted ossec-syscheckd \
ossec-analysisd ossec-maild ossec-execd ${DB_DAEMON} ${CSYSLOG_DAEMON} \
${AGENTLESS_DAEMON}"<br> ><br>
> <br>
><br>
> SDAEMONS="${DB_DAEMON} ${CSYSLOG_DAEMON} ${AGENTLESS_DAEMON} ossec-maild \
ossec-execd ossec-analysisd ossec-logcollector ossec-syscheckd ossec-monitord \
ossec-remoted"<br> ><br>
> <br>
><br>
> <br>
><br>
> And on file /var/ossec/etc/ossec.conf, added next lines:<br>
><br>
> <br>
><br>
> <remote><br>
><br>
> <br>
><br>
> <connection>secure</connection><br>
><br>
> <br>
><br>
> </remote><br>
><br>
> <br>
><br>
> <br>
><br>
> <br>
><br>
> De: <a href="mailto:ossec-list@googlegroups.com">ossec-list@googlegroups.com</a> \
[mailto:<a href="mailto:ossec-list@googlegroups.com">ossec-list@googlegroups.com</a>] \
En nombre de dan (ddp)<br> > Enviado el: jueves, 21 de julio de 2016 05:19 \
p.m.<br> > Para: <a \
href="mailto:ossec-list@googlegroups.com">ossec-list@googlegroups.com</a><br> > \
Asunto: Re: [ossec-list] ADDING NEW AGENTS IN OSSEC INSTALATION IN LOCAL MODE<br> \
><br> > <br>
><br>
> On Jul 21, 2016 6:17 PM, "Aj Navarro" <<a \
href="mailto:ajnavarro1328@gmail.com">ajnavarro1328@gmail.com</a>> wrote:<br> > \
><br> > > Im installing OSSEC in LOCAL MODE and i have interesting to adding \
new agents.<br> > > <br>
> > How can i do it if the OSSEC Server is in LOCAL MODE?<br>
> > How can i change OSSEC LOCAL MODE to OSSEC SERVER MODE?<br>
> > Its neccesary reinstalling OSSEC in SERVER MODE?<br>
> ><br>
><br>
> I haven't tried this:<br>
> Backup anything you want to make sure you don't lose, and rerun install.sh. \
Then don't do and upgrade and don't delete the install dir.<br> ><br>
> > -- <br>
> ><br>
> > --- <br>
> > You received this message because you are subscribed to the Google Groups \
"ossec-list" group.<br> > > To unsubscribe from this group and stop \
receiving emails from it, send an email to <a \
href="mailto:ossec-list%2Bunsubscribe@googlegroups.com">ossec-list+unsubscribe@googlegroups.com</a>.<br>
> > For more options, visit <a \
href="https://groups.google.com/d/optout">https://groups.google.com/d/optout</a>.<br> \
><br> > -- <br>
><br>
> --- <br>
> You received this message because you are subscribed to the Google Groups \
"ossec-list" group.<br> > To unsubscribe from this group and stop \
receiving emails from it, send an email to <a \
href="mailto:ossec-list%2Bunsubscribe@googlegroups.com">ossec-list+unsubscribe@googlegroups.com</a>.<br>
> For more options, visit <a \
href="https://groups.google.com/d/optout">https://groups.google.com/d/optout</a>.<br> \
><br> > -- <br>
><br>
> --- <br>
> You received this message because you are subscribed to the Google Groups \
"ossec-list" group.<br> > To unsubscribe from this group and stop \
receiving emails from it, send an email to <a \
href="mailto:ossec-list%2Bunsubscribe@googlegroups.com">ossec-list+unsubscribe@googlegroups.com</a>.<br>
> For more options, visit <a \
href="https://groups.google.com/d/optout">https://groups.google.com/d/optout</a>.<br></p>
<p></p>
-- <br />
<br />
--- <br />
You received this message because you are subscribed to the Google Groups \
"ossec-list" group.<br /> To unsubscribe from this group and stop receiving \
emails from it, send an email to <a \
href="mailto:ossec-list+unsubscribe@googlegroups.com">ossec-list+unsubscribe@googlegroups.com</a>.<br \
/> For more options, visit <a \
href="https://groups.google.com/d/optout">https://groups.google.com/d/optout</a>.<br \
/>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic