Not sure what you mean by "it's documented". is the fact that the rpm install doesn't work documented, or are you talking about the install documentation that does not cover the rpm install, but the tgz install?
I ended up using the tgz, but I thought I might bring up the fact that there is something wrong with the rpm. Side note. With the rpm install (not sure about the tgz one) the server sends emails regardless of the settings in the config. Sent from my iPhone On Jun 20, 2012, at 15:21, "dan (ddp)" <ddp...@gmail.com> wrote: > It's documented. In fact in the real install the config is populated for you. > > http://www.ossec.net/doc/syntax/head_ossec_config.client.html#element-server-ip > > In /var/ossc/etc/ossec.conf > So something like: > <ossec_config> > <client> > <server-ip>192.168.23.1</server-ip> > > This is all supe basic stuff. What would have made it easier to find in the > documentation? > On Jun 20, 2012 6:11 PM, "Brett Y" <cgka...@gmail.com> wrote: > After installing ossec-hids-client and its dependencies, running > /var/ossec/bin/ossec-configure, if you select agent, you are not prompted for > the ip address of the server. And there doesn't seem to be any docs on how to > manually set that.
