search

ossec / ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
http://www.ossec.net
Other
4.49k stars 1.04k forks source link

Is there a way to rename the agent that runs on the OSSEC Manager server? #993

Closed greyhammer closed 5 years ago

greyhammer commented 7 years ago

Currently I have the following, 

root@ip-10-0-0-71:~# /var/ossec/bin/agent_control -l

OSSEC HIDS agent_control. List of available agents:
   ID: 000, Name: ip-10-0-0-71 (server), IP: 127.0.0.1, Active/Local

As I start to add additional agents I can specify their names, is there a way to rename this local agent so that my dashboards are a little easier to read?

aquerubin commented 7 years ago

Look for rename_agent.sh and renumber_agent.sh in the source contrib directory.

Tony

On Nov 22, 2016, at 08:57, Keith Janak notifications@github.com wrote:

Currently I have the following,

root@ip-10-0-0-71:~# /var/ossec/bin/agent_control -l

OSSEC HIDS agent_control. List of available agents: ID: 000, Name: ip-10-0-0-71 (server), IP: 127.0.0.1, Active/Local As I start to add additional agents I can specify their names, is there a way to rename this local agent so that my dashboards are a little easier to read?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

ddpbsd commented 7 years ago

By default agent_control gets the server's hostname and uses that. You can modify src/util/agent_control.c to put something else for the name.