[prelude-user] Prelude support for Ossec

Arthur Chilipweli achilipweli at cox.net
Wed Oct 17 08:25:58 CEST 2007


Thanks for the good documentation, but I am having a problem to get the ossec to report into the prelude. The ossec sensor does not show up in the prelude. Here is the brief summary, i used the ossec-hids-071006 the latest version ossec-hids-1.3 indicate there is no rule to make setprelude.

I followed the instruction as follows 
 
cd to src
make setprelude 
cd ..
./install.sh 

I tried all three options separately (server, agent, and local) 
 
After it was installed i modified the ossec.conf and added <prelude_output>yes</prelude_output>

I went ahead and register the ossec as follow  
prelude-adduser register ossec "idmef:w admin:r" 10.6.1.100 --uid ossec --gid ossec
started the ossec
Ossec seems to be running but i expected the sensor to show up in the prelude
 
Note: I am running Fedora Core 6
 
I there something i am doing wrong, Please help 
 
--Arthur 




More information about the Prelude-user mailing list