Add Option to Forward Agent Name from Down-level Agent
Reported on IRC..
When OSSEC is installed in a multi-tier architecture, one manager can have a local agent installed that looks at alerts.log and forwards the alerts to the next manager. The problem is that all alerts appear to have come from the down-level manager, rather than from the original agent. It would probably be best to have an option that retains the original agent name.