On Sun, Aug 3, 2014 at 7:37 AM, Patrick S <[email protected]> wrote: > In the below alert segment "Ubuntu" is displayed, how can I change it so the > alert displays the IP address of that computer for every alert? > > 2014 Jul 20 06:29:00 ubuntu->/var/log/auth.log >
I think that's the agent name given to the system when you added it via manage_agents. Change that to the IP instead of the hostname, and it should work. > Thanks :) > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
