agent configuration and monitoring

This commit is contained in:
cadoming 2018-11-15 12:16:05 +00:00
parent aa1dfcdb60
commit f2b3ac68bb
2 changed files with 6 additions and 5 deletions

View File

@ -90,6 +90,8 @@ wazuh_agent_config:
location: '/var/log/messages' location: '/var/log/messages'
- format: 'syslog' - format: 'syslog'
location: '/var/log/secure' location: '/var/log/secure'
- format: 'syslog'
location: 'var/log/auth.log'
- format: 'command' - format: 'command'
command: 'df -P' command: 'df -P'
frequency: '360' frequency: '360'

View File

@ -221,11 +221,10 @@ wazuh_agent_configs:
- /etc/svc/volatile - /etc/svc/volatile
no_diff: no_diff:
- /etc/ssl/private.key - /etc/ssl/private.key
directories: # Example
- dirs: /etc,/usr/bin,/usr/sbin #directories:
checks: 'check_all="yes"' #- dirs: /etc,/usr/bin,/usr/sbin
- dirs: /bin,/sbin # checks: 'check_all="yes"'
checks: 'check_all="yes"'
rootcheck: rootcheck:
frequency: 43200 frequency: 43200
cis_distribution_filename: null cis_distribution_filename: null