Re: [ossec-list] Re: Large scale deployment

2012-11-26 Thread JJ Yu
2 cents > Kat > > On Tuesday, September 25, 2012 11:57:01 AM UTC-7, JB wrote: >> >> I know there are deployments of more than 3000 agents on one OSSEC >> server. >> You need to keep an eye on the amount of network traffic though. >> Overloading can result in lo

[ossec-list] Large scale deployment

2012-09-23 Thread JJ Yu
Dears, Is there any one knows large scale development ? I want to implement over 1 set. There is an issue on how to deployment client key and management. Could you share any experience? Many thanks. Br. JJ

Re: [ossec-list] Can't Overwrite Rule 554

2012-08-28 Thread JJ Yu
thanks! ossec syscheck_new_entry keylog.exe File added to the system.(Intrusion) syscheck, 2012/8/28 dan (ddp) > On Sun, Aug 26, 2012 at 11:15 PM, JJ Yu wrote: > > I was write rule in ossec_rules.xml. but it is not effect. Please help~~~ > > as : >

Re: [ossec-list] Can't Overwrite Rule 554

2012-08-28 Thread JJ Yu
added to the system.(Intrusion) syscheck, 2012/8/27 Frank Stefan Sundberg Solli > You need to add it to local_rules.xml > > > On Mon, Aug 27, 2012 at 5:15 AM, JJ Yu wrote: > >> I was write rule in ossec_rules.xml. but it is not ef

[ossec-list] Can't Overwrite Rule 554

2012-08-26 Thread JJ Yu
I was write rule in ossec_rules.xml. but it is not effect. Please help~~~ as : ossec syscheck_new_entry File added to the system. syscheck, ossec syscheck_new_entry ^keylog.exe^ File added to the system.(Intrusion) syscheck,