Hi, Due to Splunk deprecating their file integrity monitoring feature of their Splunk agent and server, I am looking for a cheap alternative. So I was wondering if it was possible to send OSSEC windows agent data directly Splunk. I was told the Windows agent needs to connect to an OSSEC server, and that server needs to forward Syslog data to Splunk, but we are unable to add another server. We are not able to install OSSEC on the same server as Splunk, as it is Splunk on Windows. Unless there is an OSSEC server for Windows that I don't know about (?)
Any help would be appreciated. Or even a suggestion for completely different low cost solution to my FIM requirements on Windows Thanks -- *MoPowered sponsors the eCommerce Zone at Spring Fair 2014. Stand 1K54; Presenting in the eCommerce Theatre (Sun 2 & Mon 3 Feb). Further info: www.springfair.com <http://www.springfair.com>* -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
