I second this. At our company, we started out using OSSEC and now are moving to OSSIM to get the web GUI and reporting. OSSIM integrates with OSSEC very well and all the work we put into creating rules and decoders for OSSEC can be reused without any change.
The only thing is the current version of OSSIM is still on OSSEC version 2.5.1. On Mon, Apr 9, 2012 at 5:40 PM, Jaime Blasco <jaime.bla...@alienvault.com>wrote: > You can take a look at Ossim. We put some basic management stuff for Ossec > also. > > http://communities.alienvault.com/community > > Best Regards > > On Mon, Apr 9, 2012 at 2:27 PM, Qasim Ijaz <iloveab...@gmail.com> wrote: > >> I'll try those. Thanks Dan. >> >> >> On Monday, April 9, 2012 4:02:14 PM UTC-5, dan (ddpbsd) wrote: >>> >>> They aren't OSSEC specific, and can't do a bunch of OSSEC specific >>> things, but I like Graylog2 and logstash. >>> >>> On Mon, Apr 9, 2012 at 4:26 PM, Qasim Ijaz <iloveab...@gmail.com> wrote: >>> > I have used OSSEC WUI and SPLUNK. I love detail in OSSEC WUI but i'd >>> like >>> > graphs. Splunk is expensive. Any alternatives guys? >>> >> > > > -- > _______________________________ > > Jaime Blasco > > AlienVault Labs Manager > > www.ossim.com > labs.alienvault.com > Email: jaime.bla...@alienvault.com > > http://twitter.com/jaimeblascob > >
