Issue #6 new

Add Option to Forward Agent Name from Down-level Agent

mstarks01
created an issue

Reported on IRC..

When OSSEC is installed in a multi-tier architecture, one manager can have a local agent installed that looks at alerts.log and forwards the alerts to the next manager. The problem is that all alerts appear to have come from the down-level manager, rather than from the original agent. It would probably be best to have an option that retains the original agent name.

Comments (0)

  1. Log in to comment