OSSEC - Agent端檢視指令

指令：/opt/ossec/bin/agent_control -h
注釋：/opt/為安裝目錄      

1 [root@redhat rules]# /opt/ossec/bin/agent_control -h
 2 
 3 OSSEC HIDS agent_control: Control remote agents.
 4 Available options:
 5     -h          This help message.
 6     -l          List available (active or not) agents.
 7     -lc         List active agents.
 8     -i <id>     Extracts information from an agent.
 9     -R <id>     Restarts agent.
10     -r -a       Runs the integrity/rootkit checking on all agents now.
11     -r -u <id>  Runs the integrity/rootkit checking on one agent now.
12 
13     -b <ip>     Blocks the specified ip address.
14     -f <ar>     Used with -b, specifies which response to run.
15     -L          List available active responses.
16     -s          Changes the output to CSV (comma delimited).
17 [root@redhat rules]#       

常用的有檢視已激活那些Agent端指令

因為目前還沒有關聯Agent端，是以除了本機外尚未有其他記錄。