ossec.conf: Agentless Options¶

Overview¶

Agentless options are available in the the following installation types:

All agentless options must be configured in the /var/ossec/etc/ossec.conf and used within the <ossec_config> tag.

XML excerpt to show location:

<ossec_config>
    <agentless>
        <!--
        agentless options here
        -->
    </agentless>
</ossec_config>

agentless¶: This is the section that will contain the agentless configuration.

type¶

The type of check to be run on the agentless system.

Options: ssh_integrity_check_bsd, ssh_integrity_check_linux, ssh_generic_diff, ssh_pixconfig_diff

host¶

This defines the username and agentless host.

Example:

<host>root@linux.server.example.com</host>

state¶

This determines whether the checks are periodic or periodic_diff.

periodic: The output from the scripts is processed by the OSSEC processes.
periodic_diff: The output from the scripts is compared to the output of previous runs.