Re: [ossec-list] OSSEC Windows Agent Directly to Splunk Server

2014-02-20 Thread Jb Cheng
Just echo Michael's comment -- OSSEC Agents send encrypted information to the OSSEC Manager and only the OSSEC Manager knows how to decrypt it. Without the OSSEC Manager in the picture, Splunk would not know how to decrypt it. On Wednesday, February 5, 2014 10:10:31 AM UTC-8, Michael Starks

Re: [ossec-list] OSSEC Windows Agent Directly to Splunk Server

2014-02-05 Thread Michael Starks
On 2014-02-05 4:02, Tino Abbraccio wrote: Due to Splunk deprecating their file integrity monitoring functionality of their agents and server, I am looking for a cheap solution to send FIM data to Splunk to report on. Therefore I am wondering if there is any way I can send data from a Windows OSSE

[ossec-list] OSSEC Windows Agent Directly to Splunk Server

2014-02-05 Thread Tino Abbraccio
Due to Splunk deprecating their file integrity monitoring functionality of their agents and server, I am looking for a cheap solution to send FIM data to Splunk to report on. Therefore I am wondering if there is any way I can send data from a Windows OSSEC agent directly into Splunk. I was told