OSSEC - Agent端查看命令

命令：/opt/ossec/bin/agent_control -h
注释：/opt/为安装目录

 [root@redhat rules]# /opt/ossec/bin/agent_control -h

 OSSEC HIDS agent_control: Control remote agents.
 Available options:
     -h          This help message.
     -l          List available (active or not) agents.
     -lc         List active agents.
     -i <id>     Extracts information from an agent.
     -R <id>     Restarts agent.
     -r -a       Runs the integrity/rootkit checking on all agents now.
     -r -u <id>  Runs the integrity/rootkit checking on one agent now.

     -b <ip>     Blocks the specified ip address.
     -f <ar>     Used with -b, specifies which response to run.
     -L          List available active responses.
     -s          Changes the output to CSV (comma delimited).
 [root@redhat rules]# 

常用的有查看已激活那些Agent端命令

因为目前还没有关联Agent端，所以除了本机外尚未有其他记录。