Skip to main content

All Questions

Tagged with
Filter by
Sorted by
Tagged with
0 votes
0 answers
1k views

OSSEC - Not seeing alerts on the Server from file changes on the Agent

I have an OSSEC server and Agent installed and configured. I have imported the key to the Agent and they appear to be communicating. However, I am trying test the file integrity monitoring feature and ...
user8897013's user avatar
0 votes
2 answers
1k views

ossec realtime file monitoring only reports on first change but fullow up changes are only reported by scheduled follow up scans

we currently have some ossec agents running on windows and real time monitoring for files activated - with the following configuration on the agent site: <syscheck> <!-- Frequency that ...
dalini's user avatar
  • 29
2 votes
2 answers
1k views

Use OSSEC active response behind load balancer

We have OSSEC installed on some web servers running behind Amazon ELB. The problem is that when the active response triggers it blocks the IP address of the load balancer. Is there any way to use the ...
Michael 's user avatar