Now that the server has been configured, this recipe covers how one can configure the clients to connect to the server to increase the intelligence and relevance of alerts.
In this example, we assume that the:
We also assume that you have successfully installed OSSEC. You can install it from the source or with a binary installer. To install from a source, use the
install.sh command and select
agent as the installation type in the first step. Binary installers will label their agent packages as either
client. The Debian package is labeled
ossec-hids-agent and the Red Hat package is labeled