Thanks for your reply; however in this case it's the server itself. So I'm not sure if there's something else that can be modified to show the servers IP.
On Monday, August 4, 2014 1:28:05 PM UTC+1, dan (ddpbsd) wrote: > > On Sun, Aug 3, 2014 at 7:37 AM, Patrick S <[email protected] > <javascript:>> wrote: > > In the below alert segment "Ubuntu" is displayed, how can I change it so > the > > alert displays the IP address of that computer for every alert? > > > > 2014 Jul 20 06:29:00 ubuntu->/var/log/auth.log > > > > I think that's the agent name given to the system when you added it > via manage_agents. Change that to the IP instead of the hostname, and > it should work. > > > Thanks :) > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
