Where are ossec logs Stored on the Agent? Charity March 22, 2024 20:24 Updated There are no readable logs stored on the agent machine. The logs are processed into alerts on the HUB and are logged in the HUB in the following locations: /var/ossec/logs/alerts/alerts.json /var/ossec/logs/alerts/alerts.log Related articles Migrating To a New On Prem HUB Server Agents Disconnected from HUB