All Questions
Tagged with ossec monitoring
3
questions
0
votes
0
answers
1k
views
OSSEC - Not seeing alerts on the Server from file changes on the Agent
I have an OSSEC server and Agent installed and configured. I have imported the key to the Agent and they appear to be communicating. However, I am trying test the file integrity monitoring feature and ...
0
votes
2
answers
1k
views
ossec realtime file monitoring only reports on first change but fullow up changes are only reported by scheduled follow up scans
we currently have some ossec agents running on windows and real time monitoring for files activated - with the following configuration on the agent site:
<syscheck>
<!-- Frequency that ...
2
votes
2
answers
1k
views
Use OSSEC active response behind load balancer
We have OSSEC installed on some web servers running behind Amazon ELB. The problem is that when the active response triggers it blocks the IP address of the load balancer. Is there any way to use the ...