命令：/opt/ossec/bin/agent_control -h
注释：/opt/为安装目录
1 [root@redhat rules]# /opt/ossec/bin/agent_control -h 2 3 OSSEC HIDS agent_control: Control remote agents. 4 Available options: 5 -h This help message. 6 -l List available (active or not) agents. 7 -lc List active agents. 8 -i <id> Extracts information from an agent. 9 -R <id> Restarts agent. 10 -r -a Runs the integrity/rootkit checking on all agents now. 11 -r -u <id> Runs the integrity/rootkit checking on one agent now. 12 13 -b <ip> Blocks the specified ip address. 14 -f <ar> Used with -b, specifies which response to run. 15 -L List available active responses. 16 -s Changes the output to CSV (comma delimited). 17 [root@redhat rules]#
常用的有查看已激活那些Agent端命令
因为目前还没有关联Agent端，所以除了本机外尚未有其他记录。