Cloudron works great with Wazuh/Ossec agent
-
Just wanted to report that, I installed Wazuh/ossec agent on my cloudron server to grab logs and send to a security onion. I've been running it alongside the Cloudron now for a while. I've been getting alerts, logs sent back etc. Everything is going well. So if you want a HIDS on your Cloudron server, Wazuh works.
-
Just wanted to report that, I installed Wazuh/ossec agent on my cloudron server to grab logs and send to a security onion. I've been running it alongside the Cloudron now for a while. I've been getting alerts, logs sent back etc. Everything is going well. So if you want a HIDS on your Cloudron server, Wazuh works.
@mastadamus So, one can just install the Wazuh agent like in https://documentation.wazuh.com/current/installation-guide/wazuh-agent/wazuh_agent_package_linux.html and that should be it?
-
@mastadamus So, one can just install the Wazuh agent like in https://documentation.wazuh.com/current/installation-guide/wazuh-agent/wazuh_agent_package_linux.html and that should be it?
@girish yep and then you got to point it out your wazuh server using the ossec.conf file
-
@girish yep and then you got to point it out your wazuh server using the ossec.conf file
@mastadamus IF you want it to grab cloudron specific logs, you gotta edit the ossec.conf file to give it a location of the logs as well.
