Change some defaults on pandora_agent.conf
This commit is contained in:
parent
447e788ab3
commit
deff8a3bce
|
@ -234,6 +234,21 @@ module_description Number of cron task files
|
||||||
module_unit files
|
module_unit files
|
||||||
module_end
|
module_end
|
||||||
|
|
||||||
|
# This module /var/log/syslog file, under the module name "syslog"
|
||||||
|
# And search for "ssh" string into it, sending only that information.
|
||||||
|
# module_begin
|
||||||
|
# module_name Syslog
|
||||||
|
# module_description Search for ssh string into /var/log/syslog file
|
||||||
|
# module_type log
|
||||||
|
# module_regexp /var/log/syslog
|
||||||
|
# module_pattern ssh
|
||||||
|
# module_end
|
||||||
|
|
||||||
|
#Hardening plugin for security compliance analysis. Enable to use it.
|
||||||
|
#module_begin
|
||||||
|
#module_plugin /usr/share/pandora_agent/plugins/pandora_hardening -t 150
|
||||||
|
#module_absoluteinterval 7d
|
||||||
|
#module_end
|
||||||
|
|
||||||
# Plugin example
|
# Plugin example
|
||||||
|
|
||||||
|
@ -241,11 +256,6 @@ module_end
|
||||||
|
|
||||||
module_plugin pandora_df
|
module_plugin pandora_df
|
||||||
|
|
||||||
# This parses /var/log/syslog file, under the module name "syslog"
|
|
||||||
# And search for "ssh" string into it, sending only that information.
|
|
||||||
|
|
||||||
module_plugin grep_log /var/log/syslog Syslog ssh
|
|
||||||
|
|
||||||
# Get disk space free in MB
|
# Get disk space free in MB
|
||||||
#module_begin
|
#module_begin
|
||||||
#module_name disk_root_free
|
#module_name disk_root_free
|
||||||
|
@ -270,7 +280,6 @@ module_plugin grep_log /var/log/syslog Syslog ssh
|
||||||
#module_end
|
#module_end
|
||||||
|
|
||||||
# Plugin for inventory on the agent.
|
# Plugin for inventory on the agent.
|
||||||
|
|
||||||
# module_plugin inventory 1 cpu ram video nic hd cdrom software init_services filesystem users process ip route
|
# module_plugin inventory 1 cpu ram video nic hd cdrom software init_services filesystem users process ip route
|
||||||
|
|
||||||
# Example of preconditions
|
# Example of preconditions
|
||||||
|
@ -304,3 +313,12 @@ module_plugin grep_log /var/log/syslog Syslog ssh
|
||||||
# This plugin runs several security checks in a Linux system
|
# This plugin runs several security checks in a Linux system
|
||||||
|
|
||||||
#module_plugin pandora_security_check
|
#module_plugin pandora_security_check
|
||||||
|
|
||||||
|
# Extraction module example
|
||||||
|
#module_begin
|
||||||
|
#module_name Collector
|
||||||
|
#module_description Logs extraction module
|
||||||
|
#module_type log
|
||||||
|
#module_regexp /var/log/logfile.log
|
||||||
|
#module_pattern .*
|
||||||
|
#module_end
|
|
@ -219,6 +219,21 @@ module_plugin cscript.exe //B "%ProgramFiles%\Pandora_Agent\util\df.vbs"
|
||||||
# module_description Free space on drive D: (%)
|
# module_description Free space on drive D: (%)
|
||||||
# module_end
|
# module_end
|
||||||
|
|
||||||
|
# Hardening plugin for security compliance analysis.
|
||||||
|
# module_begin
|
||||||
|
# module_plugin "%PROGRAMFILES%\Pandora_Agent\util\pandora_hardening.exe -t 150"
|
||||||
|
# module_absoluteinterval 7d
|
||||||
|
# module_end
|
||||||
|
|
||||||
|
# Logs extraction
|
||||||
|
#module_begin
|
||||||
|
#module_name X_Server_log
|
||||||
|
#module_description Logs extraction module
|
||||||
|
#module_type log
|
||||||
|
#module_regexp C:\server\logs\xserver.log
|
||||||
|
#module_pattern .*
|
||||||
|
#module_end
|
||||||
|
|
||||||
# Sample of Windows inventory module (ONLY ENTERPRISE)!
|
# Sample of Windows inventory module (ONLY ENTERPRISE)!
|
||||||
#module_begin
|
#module_begin
|
||||||
#module_name Inventory
|
#module_name Inventory
|
||||||
|
@ -345,3 +360,12 @@ module_plugin cscript.exe //B "%ProgramFiles%\Pandora_Agent\util\df.vbs"
|
||||||
#module_exec echo 5
|
#module_exec echo 5
|
||||||
#module_description Postcondition test module
|
#module_description Postcondition test module
|
||||||
#module_end
|
#module_end
|
||||||
|
|
||||||
|
# Example of collector module
|
||||||
|
#module_begin
|
||||||
|
#module_name Collector
|
||||||
|
#module_description Logs extraction module
|
||||||
|
#module_type log
|
||||||
|
#module_regexp /var/log/logfile.log
|
||||||
|
#module_pattern .*
|
||||||
|
#module_end
|
|
@ -157,12 +157,33 @@ module_exec last | head -1
|
||||||
module_description Last Login
|
module_description Last Login
|
||||||
module_end
|
module_end
|
||||||
|
|
||||||
# Plugin example
|
#Hardening plugin for security compliance analysis. Enable to use it.
|
||||||
|
#module_begin
|
||||||
|
#module_plugin /usr/share/pandora_agent/plugins/pandora_hardening -t 150
|
||||||
|
#module_absoluteinterval 7d
|
||||||
|
#module_end
|
||||||
|
|
||||||
# This parses /var/log/syslog file, under the module name "syslog"
|
# This module parses /var/log/syslog file, under the module name "syslog"
|
||||||
# And search for "ssh" string into it, sending only that information.
|
# And search for "ssh" string into it, sending only that information.
|
||||||
|
|
||||||
module_plugin grep_log /var/log/syslog Syslog ssh
|
module_begin
|
||||||
|
module_name Syslog
|
||||||
|
module_description Search for ssh string into /var/log/syslog file
|
||||||
|
module_type log
|
||||||
|
module_regexp /var/log/syslog
|
||||||
|
module_pattern ssh
|
||||||
|
module_end
|
||||||
|
|
||||||
|
# Plugin example
|
||||||
|
|
||||||
# Plugin for inventory on the agent.
|
# Plugin for inventory on the agent.
|
||||||
# module_plugin inventory 1 cpu ram video nic hd cdrom software
|
# module_plugin inventory 1 cpu ram video nic hd cdrom software
|
||||||
|
|
||||||
|
# Extraction module example
|
||||||
|
#module_begin
|
||||||
|
#module_name Collector
|
||||||
|
#module_description Logs extraction module
|
||||||
|
#module_type log
|
||||||
|
#module_regexp /var/log/logfile.log
|
||||||
|
#module_pattern .*
|
||||||
|
#module_end
|
|
@ -372,13 +372,32 @@ module_end
|
||||||
#module_description XGrid
|
#module_description XGrid
|
||||||
#module_end
|
#module_end
|
||||||
|
|
||||||
|
#Hardening plugin for security compliance analysis. Enable to use it.
|
||||||
|
#module_begin
|
||||||
|
#module_plugin /usr/share/pandora_agent/plugins/pandora_hardening -t 150
|
||||||
|
#module_absoluteinterval 7d
|
||||||
|
#module_end
|
||||||
|
|
||||||
|
# This module parses /var/log/syslog file, under the module name "syslog"
|
||||||
|
# And search for "ssh" string into it, sending only that information.
|
||||||
|
#module_begin
|
||||||
|
#module_name Syslog
|
||||||
|
#module_description Log collection modules
|
||||||
|
#module_type log
|
||||||
|
#module_regexp /var/log/syslog
|
||||||
|
#module_pattern ssh
|
||||||
|
#module_end
|
||||||
|
|
||||||
# Plugin example
|
# Plugin example
|
||||||
|
|
||||||
# This parses /var/log/syslog file, under the module name "syslog"
|
|
||||||
# And search for "ssh" string into it, sending only that information.
|
|
||||||
|
|
||||||
#module_plugin grep_log /var/log/syslog Syslog ssh
|
|
||||||
|
|
||||||
# Plugin for inventory on the agent.
|
# Plugin for inventory on the agent.
|
||||||
|
|
||||||
# module_plugin inventory 1 cpu ram video nic hd cdrom software
|
# module_plugin inventory 1 cpu ram video nic hd cdrom software
|
||||||
|
|
||||||
|
# Extraction module example
|
||||||
|
#module_begin
|
||||||
|
#module_name Collector
|
||||||
|
#module_description Logs extraction module
|
||||||
|
#module_type log
|
||||||
|
#module_regexp /var/log/logfile.log
|
||||||
|
#module_pattern .*
|
||||||
|
#module_end
|
|
@ -275,7 +275,13 @@ module_plugin autodiscover --default
|
||||||
|
|
||||||
# Log collection modules. This will collect log files for forensic analysis and store everything
|
# Log collection modules. This will collect log files for forensic analysis and store everything
|
||||||
# This is for LOG monitoring. Different than log monitoring.
|
# This is for LOG monitoring. Different than log monitoring.
|
||||||
#module_plugin grep_log_module /var/log/messages Syslog \.\*
|
#module_begin
|
||||||
|
#module_name Syslog
|
||||||
|
#module_description Log collection modules
|
||||||
|
#module_type log
|
||||||
|
#module_regexp /var/log/messages
|
||||||
|
#module_pattern .*
|
||||||
|
#module_end
|
||||||
|
|
||||||
# Another samples of monitoring modules
|
# Another samples of monitoring modules
|
||||||
|
|
||||||
|
@ -317,9 +323,9 @@ module_plugin autodiscover --default
|
||||||
#module_absoluteinterval 7d
|
#module_absoluteinterval 7d
|
||||||
#module_end
|
#module_end
|
||||||
|
|
||||||
# Logs extraction
|
# Extraction module example
|
||||||
#module_begin
|
#module_begin
|
||||||
#module_name Syslog
|
#module_name Collector
|
||||||
#module_description Logs extraction module
|
#module_description Logs extraction module
|
||||||
#module_type log
|
#module_type log
|
||||||
#module_regexp /var/log/logfile.log
|
#module_regexp /var/log/logfile.log
|
||||||
|
|
Loading…
Reference in New Issue