Skip to content

Add repeated_offenders to client's ossec.conf #1

@treydock

Description

@treydock

Something like the following must be defined in the agent's ossec.conf, not the shared/agent.conf or server's ossec.conf

<active-response>
    <repeated_offenders>30,120,360,420,840</repeated_offenders>
</active-response>

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions