Ossec常用命令

• 启动并查看httpd服务

systemctl start httpd
systemctl status httpd.service 

• 启动并查看mysql服务

systemctl start mariadb
systemctl status mariadb.service 

• 启动并查看sendmail服务

systemctl start  sendmail.service 
systemctl status sendmail.service 

•  批量重启apache、mysql、sendmail服务

for i in {httpd,mariadb,sendmail};do systemctl restart $i ;done

• 重新启动OSSEC

/opt/ossec/bin/ossec-control restart

• 查看OSSEC状态

/opt/ossec/bin/ossec-control status

• Web界面文件存放目录

/var/www/html/analogi

• apache应用的虚拟目录

/etc/httpd/conf.d/analogi.conf

•  客户端添加导出Key

/opt/ossec/bin/manage_agents

•  agent相关配置

/opt/ossec/bin/manage_agents

   (A)dd an agent (A).
   (E)xtract key for an agent (E).
   (L)ist already added agents (L).
   (R)emove an agent (R).
   (Q)uit.

Choose your action: A,E,L,R or Q: A

解决方法：
在php.ini里加上
date.timezone = "Asia/Shanghai"

date.timezone = PRC