[ossec-list] Fwd: check_ossec nagios plugin

2009-01-26 Thread Bill Mathews
We've also added an explanation here: http://code.google.com/p/checkossec/wiki/NagiosConfiguration -- Forwarded message -- From: Bill Mathews Date: Mon, Jan 26, 2009 at 4:36 PM Subject: Re: check_ossec nagios plugin To: ossec-list@googlegroups.com Derek, >Whats the syntax loo

[ossec-list] Re: check_ossec nagios plugin

2009-01-26 Thread Bill Mathews
Derek, >Whats the syntax look like in the config files for nagios?? define command { command_namecheck_remote_ossec command_line$USER1$/check_nrpe -nH $ARG1$ -c check_ossec -a $HOSTADDRESS$ } The above is for using via NRPE. command[check_ossec]=/usr/local/nagioscomm

[ossec-list] Re: check_ossec nagios plugin

2009-01-26 Thread Derek J. Morris
Hi Bill, Whats the syntax look like in the config files for nagios?? > http://checkossec.googlecode.com/files/check_ossec.tgz > > A Nagios check for connected/disconnected OSSEC agents. We've found it to be > incredibly useful to have. Hope it's useful to all of you. > > > Bill > > > -- > > Thi

[ossec-list] check_ossec nagios plugin

2009-01-26 Thread Bill Mathews
http://checkossec.googlecode.com/files/check_ossec.tgz A Nagios check for connected/disconnected OSSEC agents. We've found it to be incredibly useful to have. Hope it's useful to all of you. Bill -- This is my gmail account, there are many like it but this one is mine.

[ossec-list] Re: ossec and system updates: forcing immediate syscheck

2009-01-26 Thread Reggie Griffin
Daniel, Thank you for the response. Mostly I want to be able to set a specific time and/or time/day that will coincide with system updates and also have a regular scan schedule. The syscheck default is every two hours. 21600 OSSEC is a pretty amazing tool. We have been reviewing commercia

[ossec-list] Re: OSSEC does not detect new log files

2009-01-26 Thread Daniel Cid
Hi Martin, Not yet, but a good feature to have. If you can open a bug for it a ossec.net/bugs we will not forget about it. Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Mon, Dec 22, 2008 at 2:21 PM, Martin wrote: > > Is it possible to combine them, such as > /var/log/*/logfile-%U.log > Ch

[ossec-list] Re: ossec and system updates: forcing immediate syscheck

2009-01-26 Thread Daniel Cid
Hi Reggie, Yes, you can set the scan time on the client side, but you can only have one per agent. I don't think it is very useful to scan more than once per day, but we can add support for this in the future. thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Mon, Jan 26, 2009 at 12:01 PM, Reg

[ossec-list] Re: ossec and system updates: forcing immediate syscheck

2009-01-26 Thread Reggie Griffin
I have a few questions related to this thread. 1. I noticed that exists on the client side. Is it possible to set the there? 2. Is it possible to set multiple s? This is my 4th post to the list in the last few months. Hopefully this one gets a response. -Reggie Daniel Cid wrote: > Hi Er