OK, thanks. Is there a list anywhere of the main differences between the two configurations? I spent most of yesterday trawling through the docs trying to work out what might be enabled in the "server" configuration which I wouldn't want in a "local" configuration.
On Wednesday, 22 October 2014 05:30:44 UTC+1, Jeremy Rossi wrote: > > > > > > > On Oct 21, 2014, at 8:11 AM, dan (ddp) <ddp...@gmail.com <javascript:>> > wrote: > > > >> On Tue, Oct 21, 2014 at 8:09 AM, <de...@scratters.com <javascript:>> > wrote: > >> The ossec-init.conf file in the CentOS RPMs I picked up has the TYPE > set to > >> 'server'. I don't need that - I only need a local installation, so I > removed > >> those RPMs and installed from the tar ball, specifying 'local'. > However, > >> given that I need to install on lots of machines I'd rather use those > RPMs > >> if at all possible. Standing on someone else's shoulders, etc. > >> > >> So, what would be involved in changing a 'server' config to a 'local' > one? > >> Presumably it's not just a case of changing that TYPE value and > restarting? > >> I can't find any documentation on the ossec-init.conf file. > >> > >> What else might those RPMs have set which I should be looking at or > >> switching off in order to get a good, default 'local' installation? > > > > I think that file only really matters during upgrades from source. I'd > > just ignore it or change the type to local. > > > Correct local and server are the same binaries just different ossec.conf > files. So install with rpm and then change the config file. > > > > > >> -- > >> > >> --- > >> You received this message because you are subscribed to the Google > Groups > >> "ossec-list" group. > >> To unsubscribe from this group and stop receiving emails from it, send > an > >> email to ossec-list+...@googlegroups.com <javascript:>. > >> For more options, visit https://groups.google.com/d/optout. > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to ossec-list+...@googlegroups.com <javascript:>. > > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
