1

I've got ossec working fine with several clients/agents with the default UDP:1514. However, after adding tcp to the server's ossec.conf file, removing and re-adding the agents, and restarting ossec on all machines, the agent logs show they are unable to contact the server, presumably because they are trying to do so over UDP.

While the server doc for ossec.conf shows the protocol option where you can spec TCP or UDP, there is nothing like this in the agent doc for ossec.conf, so my question is how does one configure the agents to also use TCP?

hotkarl
  • 155
  • 1
  • 10

1 Answers1

1

I found by searching the ossec mailing list that this is not possible.

hotkarl
  • 155
  • 1
  • 10