agent.conf

Overview

More information on using the agent.conf can be found here

Supported types

The agent.conf is valid on the server install only.

Location

The agent.conf exists in /var/ossec/etc/shared. It should be readable by the ossec user.

XML excerpt to show location:

<agent_config>
    ...
</agent_config>

Options

agent_config_options
agent_config

Defines the beginning or end of an agent configuration block.

name

This option to agent_config allows you to assign the block the one particular agent by using the agent’s name.

Example: <agent_config name=”agent007”>

os

This option to agent_config allows you to assign the block to an operating system.

Example: <agent_config os=”Windows”>

Allowed: Any OS family (Windows, Linux, OpenBSD, etc.)

profile

This option to agent_config allows you to assign a profile name to the the block. Any agent may use this block if it is configured to use the defined profile.

Example: <agent_config profile=”webservers”>