On Mon, Jan 7, 2013 at 12:47 PM, Ray Detwiler <[email protected]> wrote: > Great thanks! So I should just uninstall the agent I have running on the > server then right? There's no other configuration needed for the server to > scan itself right? >
You may have to do some tuning to the configuration (just like you would an agent), but you shouldn't need the agent installation. > > On Mon, Jan 7, 2013 at 12:43 PM, dan (ddp) <[email protected]> wrote: >> >> Sorry this took so long to make it to the mailing list, it got stuck >> in the moderation queue. >> >> >> On Sat, Jan 5, 2013 at 6:08 PM, Ray Detwiler <[email protected]> wrote: >> > Hello, >> > I want to use my main box to act as the main server for other agent >> > across >> > my network but also scan itself. I installed OSSEC as a server to >> > /var/ossec/ and then did a agent install to /var/ossec/agents/ and added >> > itself to the agent configuration, which seems to be working fine. Am I >> > over >> > complicating things with duplication? Does the server setup >> > automatically >> > scan itself or was I correct to do two installs? >> > >> > Thanks! >> >> >> The server should automatically scan itself. It runs ossec-syscheckd >> and ossec-logcollector just like an agent. > > > > > -- > 45Press, Inc. > Ray Detwiler -- VP, Server Architecture & Data > [email protected] -- (330) 207-3597 > http://www.45press.com - Site > @45press - Twitter > Facebook.com/45Press - Facebook > > > This message contains confidential information and is intended only for the > individual named. If you are not the named addressee you should not > disseminate, distribute or copy this e-mail. Please notify the sender > immediately by e-mail if you have received this e-mail by mistake and delete > this e-mail from your system. E-mail transmission cannot be guaranteed to be > secure or error-free as information could be intercepted, corrupted, lost, > destroyed, arrive late or incomplete, or contain viruses. The sender > therefore does not accept liability for any errors or omissions in the > contents of this message, which arise as a result of e-mail transmission. If > verification is required please request a hard-copy version. 45Press, Inc., > Austintown, Ohio, United States, www.45press.com
