tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Automatically apply log collection

This commit is contained in:
felix.suarez 2023-11-29 11:13:09 -06:00
parent deff8a3bce
commit 8940e2b9aa
5 changed files with 21 additions and 31 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
pandora_agents/pc/Linux/pandora_agent.conf
View File

@ -236,13 +236,13 @@ module_end
# This module /var/log/syslog file, under the module name "syslog" # This module /var/log/syslog file, under the module name "syslog"
# And search for "ssh" string into it, sending only that information. # And search for "ssh" string into it, sending only that information.
# module_begin module_begin
# module_name Syslog module_name Syslog
# module_description Search for ssh string into /var/log/syslog file module_description Search for ssh string into /var/log/syslog file
# module_type log module_type log
# module_regexp /var/log/syslog module_regexp /var/log/syslog
# module_pattern ssh module_pattern ssh
# module_end module_end
#Hardening plugin for security compliance analysis. Enable to use it. #Hardening plugin for security compliance analysis. Enable to use it.
#module_begin #module_begin

9
pandora_agents/pc/Win32/pandora_agent.conf
View File

@ -225,15 +225,6 @@ module_plugin cscript.exe //B "%ProgramFiles%\Pandora_Agent\util\df.vbs"
# module_absoluteinterval 7d # module_absoluteinterval 7d
# module_end # module_end
# Logs extraction
#module_begin
#module_name X_Server_log
#module_description Logs extraction module
#module_type log
#module_regexp C:\server\logs\xserver.log
#module_pattern .*
#module_end
# Sample of Windows inventory module (ONLY ENTERPRISE)! # Sample of Windows inventory module (ONLY ENTERPRISE)!
#module_begin #module_begin
#module_name Inventory #module_name Inventory

1
pandora_agents/shellscript/linux/pandora_agent.conf
View File

@ -165,7 +165,6 @@ module_end
# This module parses /var/log/syslog file, under the module name "syslog" # This module parses /var/log/syslog file, under the module name "syslog"
# And search for "ssh" string into it, sending only that information. # And search for "ssh" string into it, sending only that information.
module_begin module_begin
module_name Syslog module_name Syslog
module_description Search for ssh string into /var/log/syslog file module_description Search for ssh string into /var/log/syslog file

14
pandora_agents/shellscript/mac_osx/pandora_agent.conf
View File

@ -380,13 +380,13 @@ module_end
# This module parses /var/log/syslog file, under the module name "syslog" # This module parses /var/log/syslog file, under the module name "syslog"
# And search for "ssh" string into it, sending only that information. # And search for "ssh" string into it, sending only that information.
#module_begin module_begin
#module_name Syslog module_name Syslog
#module_description Log collection modules module_description Log collection modules
#module_type log module_type log
#module_regexp /var/log/syslog module_regexp /var/log/syslog
#module_pattern ssh module_pattern ssh
#module_end module_end
# Plugin example # Plugin example

14
pandora_agents/unix/Linux/pandora_agent.conf
View File

@ -275,13 +275,13 @@ module_plugin autodiscover --default
# Log collection modules. This will collect log files for forensic analysis and store everything # Log collection modules. This will collect log files for forensic analysis and store everything
# This is for LOG monitoring. Different than log monitoring. # This is for LOG monitoring. Different than log monitoring.
#module_begin module_begin
#module_name Syslog module_name Syslog
#module_description Log collection modules module_description Log collection modules
#module_type log module_type log
#module_regexp /var/log/messages module_regexp /var/log/messages
#module_pattern .* module_pattern .*
#module_end module_end
# Another samples of monitoring modules # Another samples of monitoring modules