Differences

This shows you the differences between two versions of the page.

--- сервис_ossec [2020/07/15 13:28]
val [Установка и запуск сервера]
+++ сервис_ossec [2020/07/15 13:35]
val [Настройка сервера для подключения агента]
@@ Line 29: / Line 29: @@
 ==== Настройка сервера для подключения агента ====
 <code>
-ossec-server# /var/ossec/bin/manage_agents
+lan# /var/ossec/bin/manage_agents
 ...
    (A)dd an agent (A).
@@ Line 41: / Line 41: @@
 ...
-ossec-server# /var/ossec/bin/ossec-control restart
+lan# /var/ossec/bin/ossec-control restart
-ossec-server# ss -panu | grep 1514
+lan# ss -panu | grep 1514
 </code>
 ==== Установка, запуск и подключение агента ====
 <code>
-ossec-agent# apt install ossec-hids-agent
+server# apt install ossec-hids-agent
-ossec-agent# vim /var/ossec/etc/ossec.conf
+server# vim /var/ossec/etc/ossec.conf
 </code><code>
 <ossec_config>
@@ Line 57: / Line 57: @@
 ...
 </code><code>
-ossec-agent# /var/ossec/bin/manage_agents
+server# /var/ossec/bin/manage_agents
+...
+   (I)mport key from the server (I).
 ...
-ossec-agent# /var/ossec/bin/ossec-control start
+server# /var/ossec/bin/ossec-control start
 </code>
 ==== Проверка подключения агента ====
 <code>
-ossec-server# /var/ossec/bin/agent_control -i 001
+lan# /var/ossec/bin/agent_control -i 001
 ...
 </code>
 ==== Просмотр отчетов ====
-https://ossec-docs.readthedocs.io/en/latest/programs/ossec-reportd.html
+  * [[https://www.ossec.net/docs/docs/programs/ossec-reportd.html|ossec-reportd]]
 <code>
-# cat /var/ossec/logs/alerts/alerts.log | /var/ossec/bin/ossec-reportd -f level 1
+lan# cat /var/ossec/logs/alerts/alerts.log | /var/ossec/bin/ossec-reportd -f level 1
 </code>

Методические материалы Лохтурова Вячеслава

User Tools

Site Tools

Differences

Page Tools