On May 26, 2014 12:39 PM, "Nguyễn Văn Hớn" <honi...@gmail.com> wrote: > > hi everybody. i have question : > How to send alert from server to agent when agent have attacked. And log from agent send to server. Where is it stored? >
You can't really send the alerts to the agents. You can send some alerts to a centralized location uskng csyslogd, but there's no functionality to send it to a lot of locations. Why would you want to do this anyways? Alerts are stored in /var/ossec/logs/alerts. Log messages are not stored by default, you need to turn on the log all option. If yiu do that they're stored in logs/archives. > thank for help > > -- > > --- > You received this message because you are subscribed to the Google Groups "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
