[{"_1":2,"_161":-5,"_162":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_140":141},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":11,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_88":-5,"_89":90,"_129":-5,"_130":11,"_131":21,"_132":11,"_133":-5,"_134":11,"_135":-5,"_136":137,"_138":91,"_139":-7},"canonicalUrl","https://hub.docker.com/r/13180791898/ossec-server/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","13180791898","reponame","ossec-server","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":74,"_79":11,"_80":81,"_85":33,"_86":87},"categories",[],"content_types",[44],"image","date_registered","2021-08-27T15:42:26.817673Z","description","","is_private","last_updated","2021-08-27T15:42:27.199922Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",94,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","使用以下命令安装ossec-sever的安装：\n docker run --name ossec-server -d -p 1514:1514/udp -p 1515:1515\\\n -e SYSLOG_FORWADING_ENABLED=true -e SYSLOG_FORWARDING_SERVER_IP=172.16.30.23\\\n -v /var/ossec/data:/var/ossec/data xetusoss/ossec-server\ndocker命令解释：\n--name：该docker容器命名为ossec-server\n \n-d：后台运行\n \n-p 1514:1514/udp -p 1515:1515 : 映射宿主机和docker容器端口号\n \n-e SYSLOG_FORWADING_ENABLED=true -e SYSLOG_FORWARDING_SERVER_IP=172.16.30.23 :\n \n-v /var/ossec/data:/var/ossec/data : 挂载容器路径\n \nxetusoss/ossec-server ：使用镜像仓库地址\ndocker容器启动成功后，进入ossec-sever容器操作:\n \ndokcer ps\n# 进入docker容器的命令\ndocker exec -it ossec-server bash\n在docker容器对ossec-server服务端进行配置操作：\n# 添加ossec对数据库的支持\n/var/ossec/bin/ossec-control enable database\n \n# 给ossec.conf文件授权\nchmod u+w /var/ossec/etc/ossec.conf\n \n# 编辑ossec.conf文件\nvi /var/ossec/data/etc/ossec.conf\n \n## 在ossec.conf添加MySQL配置：\n \n 172.16.30.23\n ossec\n ossec\n ossec\n mysql\n \n \n## 在ossec.conf添加ip网段配置 \n \n syslog\n 172.16.0.0/16\n \n \n## 添加邮件信息\n \n no\n ser365@qq.com\n smtp.your_domain.com.\n ossecm@ossec.your_domain.com.\n \n在服务端添加代理端主机：\n# 在ossec-server的docker环境里\n/var/ossec/bin/manage_agents\n \n# 在出现的选择中选A，添加agent，分别给填写：\nossec-agent #自己取的名字\n172.16.30.22 #agent服务器的IP\n022 #自己规定的ID\n在服务端获取代理端的KEY：\n# 在ossec-server的docker环境里\n/var/ossec/bin/manage_agents`\n# 在出现的选择中选E,在随后的提示里输入ID号：022，\n就能得到ID为022的agent主机的KEY\n启动ossec服务端\n# 在ossec-server的docker环境里\n/var/ossec/bin/ossec-control start\n4、ossec-agent客户端安装\n使用yum安装ossec-agent\nossec-agent是使用yum安装，在要监控的agent服务器中操作：\n\nwget -q -O - https://updates.atomicorp.com/installers/atomic |sh\n \nyum install ossec-hids ossec-hids-client\n配置ossec-agent配置文件\n配置ossec-agent的配置文件，我们需要删除ossec-agent.conf的配置信息，因为这与ossec-server服务器上的配置重复了，不处理会在启动出现报错。\n\nvim /var/ossec/etc/ossec-agent.conf\n \n# 将ossec-agent.conf文件里的内容删减到只剩：\n\n \n\n \n 172.16.30.23\n \n \n\n在agent添加KEY：\n/var/ossec/bin/manage_agents\n \n# 输入I，将ID022的agent机器的KEY加入\n启动ossec-agent客户端：\n/var/ossec/bin/ossec-control start\n三、ossec的server和agent连接查看\n查看ossec连接情况\n在ossec服务端，查看agent的连接情况\n\n# 在ossec-server的docker环境里\n/var/ossec/bin/agent_control -l\n#\nOSSEC HIDS agent_control. List of available agents:\n ID: 000, Name: cacee8d64533 (server), IP: 127.0.0.1, Active/Local\n ID: 001, Name: DEFAULT_LOCAL_AGENT, IP: 127.0.0.1, Never connected\n ID: 022, Name: ossec-agent22, IP: 172.16.30.22, Active\n \n# 显示ID:022的活动状态为Active，即为连接成功在活动中\n","has_starred","hub_user","immutable_tags_settings",{"_75":11,"_76":77},"enabled","rules",[78],".*","is_automated","permissions",{"_82":21,"_83":11,"_84":11},"read","write","admin","user","storage_size",135670844,"orgData","recentTags",[91],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":100,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":108,"_126":118,"_127":66,"_128":21},"content_type","creator",12347737,"full_size",135659389,"id",164668754,"images",[101],{"_102":103,"_104":105,"_106":48,"_107":108,"_109":110,"_111":112,"_113":48,"_114":-5,"_115":116,"_63":66,"_117":-5},"architecture","amd64","digest","sha256:f244a2c7b0cda350d27f546b29e4c4293de0f808b10af6adbabd796ba02d7e29","features","last_pulled","2026-09-30T07:08:42.936191383Z","last_pushed","2017-02-08T21:59:08Z","os","linux","os_features","os_version","size",135659293,"variant","2021-08-27T15:42:26.721028Z","last_updater","last_updater_username","media_type","v1","repository",15237956,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":142,"_149":150,"_136":159,"_160":11},{"_40":143,"_42":144,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":145,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":146,"_79":11,"_80":148,"_85":33,"_86":87},[],[44],[56],{"_75":11,"_76":147},[78],{"_82":21,"_83":11,"_84":11},"tags",{"_151":64,"_152":-5,"_153":-5,"_154":155},"count","next","previous","results",[156],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":157,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":108,"_126":118,"_127":66,"_128":21},[158],{"_102":103,"_104":105,"_106":48,"_107":108,"_109":110,"_111":112,"_113":48,"_114":-5,"_115":116,"_63":66,"_117":-5},[],"canDeleteTags","actionData","errors"]

13180791898/ossec-server

Tags for 13180791898/ossec-server