The ossec-init.conf file in the CentOS RPMs I picked up has the TYPE set to 'server'. I don't need that - I only need a local installation, so I removed those RPMs and installed from the tar ball, specifying 'local'. However, given that I need to install on lots of machines I'd rather use those RPMs if at all possible. Standing on someone else's shoulders, etc.
So, what would be involved in changing a 'server' config to a 'local' one? Presumably it's not just a case of changing that TYPE value and restarting? I can't find any documentation on the ossec-init.conf file. What else might those RPMs have set which I should be looking at or switching off in order to get a good, default 'local' installation? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.