The OSSEC project has made RPM and deb packages available. Links to the packages can be found on the OSSEC download page
OSSEC’s RPMs are made available by AtomiCorp.
The RPMs can be installed by adding the AtomiCorp yum repository:
# wget -q -O - https://updates.atomicorp.com/installers/atomic | sh
Next use yum to install the specific packages. For an OSSEC server run:
# yum install ossec-hids ossec-hids-server
And for an agent run:
# yum install ossec-hids ossec-hids-agent
OSSEC’s deb packages are available in the Wazuh repository.
Install the apt-get repository key:
# apt-key adv --fetch-keys http://ossec.wazuh.com/repos/apt/conf/ossec-key.gpg.key
Add the repository for Debian (available distributions are Sid, Jessie and Wheezy):
# echo 'deb http://ossec.wazuh.com/repos/apt/debian wheezy main' >> /etc/apt/sources.list
Or add the repository for Ubuntu (available distributions are Precise, Trusty and Utopic):
# echo 'deb http://ossec.wazuh.com/repos/apt/ubuntu precise main' >> /etc/apt/sources.list
Update the repository:
Install OSSEC HIDS server/manager:
# apt-get install ossec-hids
Or install OSSEC HIDS agent:
# apt-get install ossec-hids-agent
Some of the BSD operating systems offer OSSEC packages you can use. Here you have FreeBSD and OpenBSD as example.
You are going to work together with pkg here. Just choose which type of setup you need (agent, local monitoring, or server/manager) and install the respective OSSEC package.
Should you opt to install an OSSEC Server/Manager:
# pkg install ossec-hids-server
If you want to install an OSSEC Agent:
# pkg install ossec-hids-agent
Note
These steps also work for DragonFlyBSD. It also uses pkg, just like FreeBSD. You can read more about it here.
Here you must work with pkg_add instead of pkg, but no worries it’s the same concept.
As it only offers one package, here is how to install OSSEC HIDS on OpenBSD:
# pkg_add ossec-hids