OSSEC - Agent端查看命令

命令：/opt/ossec/bin/agent_control -h
注释：/opt/为安装目录

 1 [root@redhat rules]# /opt/ossec/bin/agent_control -h
 2 
 3 OSSEC HIDS agent_control: Control remote agents.
 4 Available options:
 5     -h          This help message.
 6     -l          List available (active or not) agents.
 7     -lc         List active agents.
 8     -i <id>     Extracts information from an agent.
 9     -R <id>     Restarts agent.
10     -r -a       Runs the integrity/rootkit checking on all agents now.
11     -r -u <id>  Runs the integrity/rootkit checking on one agent now.
12 
13     -b <ip>     Blocks the specified ip address.
14     -f <ar>     Used with -b, specifies which response to run.
15     -L          List available active responses.
16     -s          Changes the output to CSV (comma delimited).
17 [root@redhat rules]# 

常用的有查看已激活那些Agent端命令

因为目前还没有关联Agent端，所以除了本机外尚未有其他记录。

 

转载于:https://www.cnblogs.com/tdcqma/p/5083628.html