ADDING NEW AGENTS IN OSSEC INSTALATION IN LOCAL MODE

15 views
Skip to first unread message

Aj Navarro

unread,
Jul 21, 2016, 6:17:43 PM7/21/16
to ossec-list
Im installing OSSEC in LOCAL MODE and i have interesting to adding new agents.
 
How can i do it if the OSSEC Server is in LOCAL MODE?
How can i change OSSEC LOCAL MODE to OSSEC SERVER MODE?
Its neccesary reinstalling OSSEC in SERVER MODE?

dan (ddp)

unread,
Jul 21, 2016, 6:24:26 PM7/21/16
to ossec...@googlegroups.com

I haven't tried this:
Backup anything you want to make sure you don't lose, and rerun install.sh. Then don't do and upgrade and don't delete the install dir.

> --
>
> ---
> You received this message because you are subscribed to the Google Groups "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

Adiel Navarro

unread,
Jul 21, 2016, 6:35:50 PM7/21/16
to ossec...@googlegroups.com

I found this in the  google group.

 

What do you think about this?

 

file /var/ossec/bin/ossec-control,  modified next lines:

 

DAEMONS="ossec-monitord ossec-logcollector ossec-remoted ossec-syscheckd ossec-analysisd ossec-maild ossec-execd ${DB_DAEMON} ${CSYSLOG_DAEMON} ${AGENTLESS_DAEMON}"

 

SDAEMONS="${DB_DAEMON} ${CSYSLOG_DAEMON} ${AGENTLESS_DAEMON} ossec-maild ossec-execd ossec-analysisd ossec-logcollector ossec-syscheckd ossec-monitord ossec-remoted"

 

 

And on file /var/ossec/etc/ossec.conf, added next lines:

 

<remote>

 

    <connection>secure</connection>

 

</remote>

dan (ddp)

unread,
Jul 21, 2016, 6:40:20 PM7/21/16
to ossec...@googlegroups.com

On Jul 21, 2016 6:35 PM, "Adiel Navarro" <adiel....@mail.telcel.com> wrote:
>
> I found this in the  google group.
>
>  
>
> What do you think about this?
>
>  

I've never tried it. Give it a shot, see what happens.

Reply all
Reply to author
Forward
0 new messages