[ossec-list] Re: Centralized configuration on the server side

["Daniel Cid" <daniel.cid@xxxxxxxxx>]

Hi,

We are not there yet :) Some of the configuration can be shared
between the server
and agents (everything under /var/ossec/etc/shared/, including rootkit
check configs, active
responses, application detection, etc), but not the main ossec.conf...
 Also, since we have all the rules on the server side, we don't need
to share them...

I have some plans to improve that in the future, but currently it is
not possible.

Btw, what kind of configuration are you interested in changing on all agents?

Thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net

On 10/8/07, carlopmart <carlopmart@xxxxxxxxx> wrote:
>
> Hi all,
>
>   I have deployed 10 agents (all systems are xen guests: openbsd, linux
> and windows 2k3) and 1 server using OSSEC and all works very very well.
>
>   But I want to know how can I centralize all agent configurations on
> the server side (to modify only one or twice times) and then distribute
> this config from server automatically to the agents. Is it possible???
>
> Thanks.
>
> --
> CL Martinez
> carlopmart {at} gmail {d0t} com
>