Comments on: Week of OSSEC Day 7: Developing a Workflow http://www.immutablesecurity.com/index.php/2009/10/31/week-of-ossec-day-7-developing-a-workflow/ Information Security, Privacy and Personal Liberty Sun, 29 Jan 2012 17:21:21 +0000 hourly 1 http://wordpress.org/?v= By: Michael Starks http://www.immutablesecurity.com/index.php/2009/10/31/week-of-ossec-day-7-developing-a-workflow/comment-page-1/#comment-913 Michael Starks Fri, 09 Sep 2011 01:57:55 +0000 http://www.immutablesecurity.com/?p=269#comment-913 Hello Harika, Sorry if there was a misunderstanding, but what I meant by the post was that you can use some sort of GUI to view the events that you would not normally get alerted on. OSSEC can also be configured to run daily reports, and you could cron this to match the workflow I mentioned in the post, but the better solution is to use a good GUI front-end for that. Thanks, Mike Hello Harika,

Sorry if there was a misunderstanding, but what I meant by the post was that you can use some sort of GUI to view the events that you would not normally get alerted on. OSSEC can also be configured to run daily reports, and you could cron this to match the workflow I mentioned in the post, but the better solution is to use a good GUI front-end for that.

Thanks,
Mike

]]> By: Harika Tandra http://www.immutablesecurity.com/index.php/2009/10/31/week-of-ossec-day-7-developing-a-workflow/comment-page-1/#comment-910 Harika Tandra Thu, 08 Sep 2011 15:28:38 +0000 http://www.immutablesecurity.com/?p=269#comment-910 Hi Michael, I have started deploying OSSEC for my group last week. Your blog posts were very helpful. Thank you !! I am able to write new rules to tune ossec and reduce noise but I am not able to figure out how you group alerts by level to be sent once a day/week/month as you suggest in this blog post. I would appreciate any pointers you can provide regarding this. Thanks again. Regards, Harika Tandra. Hi Michael,

I have started deploying OSSEC for my group last week. Your blog posts were very helpful. Thank you !!
I am able to write new rules to tune ossec and reduce noise but I am not able to figure out how you group alerts by level to be sent once a day/week/month as you suggest in this blog post. I would appreciate any pointers you can provide regarding this.

Thanks again.

Regards,
Harika Tandra.

]]>