Ossec agents

A.J.

• September 28, 2020 12:15

hello, i am trying to get to know Ossec. I downloaded the appliance, created an agent(ip addres of a Windows client), restarted the agent. But now? How do i know if the installation was succesfull and if the agent is connecting to the Ossec server. I dont see any info about the client in Kibana.

Also, the read me file is telling me i need to put the Ossec virtual machine into bridged mode. But if i do that, how can my clients communicate with the Ossec server? They reside in a different network segment.

 

many thanks for any help.

0

• 

  mikeshinn

  • February 04, 2021 16:14

  The official VM is deprecated (were moving to containers in stead) and Kibana which wasnt really a thing at the time that version of OSSEC was released which is probably why its not connect to Kibana.

  I would recommend you use the OSSEC+ installer instead, a full ELK stack is included in OSSEC+ .  You can download OSSEC+ here:

  https://www.ossec.net/ossec-downloads/

   

  0

  Comment actions Permalink

Please sign in to leave a comment.