Cloudron works great with Wazuh/Ossec agent
-
Just wanted to report that, I installed Wazuh/ossec agent on my cloudron server to grab logs and send to a security onion. I've been running it alongside the Cloudron now for a while. I've been getting alerts, logs sent back etc. Everything is going well. So if you want a HIDS on your Cloudron server, Wazuh works.
-
Just wanted to report that, I installed Wazuh/ossec agent on my cloudron server to grab logs and send to a security onion. I've been running it alongside the Cloudron now for a while. I've been getting alerts, logs sent back etc. Everything is going well. So if you want a HIDS on your Cloudron server, Wazuh works.
@mastadamus So, one can just install the Wazuh agent like in https://documentation.wazuh.com/current/installation-guide/wazuh-agent/wazuh_agent_package_linux.html and that should be it?
-
@mastadamus So, one can just install the Wazuh agent like in https://documentation.wazuh.com/current/installation-guide/wazuh-agent/wazuh_agent_package_linux.html and that should be it?
@girish yep and then you got to point it out your wazuh server using the ossec.conf file
-
@girish yep and then you got to point it out your wazuh server using the ossec.conf file
@mastadamus IF you want it to grab cloudron specific logs, you gotta edit the ossec.conf file to give it a location of the logs as well.
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login