{"id":18468,"date":"2016-01-30T11:09:23","date_gmt":"2016-01-30T17:09:23","guid":{"rendered":"https:\/\/www.rosehosting.com\/blog\/?p=18468"},"modified":"2022-06-03T03:43:51","modified_gmt":"2022-06-03T08:43:51","slug":"install-ossec-agent-on-ubuntu-14-04","status":"publish","type":"post","link":"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/","title":{"rendered":"Install OSSEC agent on Ubuntu 14.04"},"content":{"rendered":"<div id=\"bsf_rt_marker\"><\/div><p><img decoding=\"async\" class=\"alignleft size-full wp-image-18429\" src=\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2016\/01\/ossec.png\" alt=\"ossec\" width=\"191\" height=\"67\" \/>This article is the second part of our <a href=\"https:\/\/www.rosehosting.com\/blog\/install-ossec-on-ubuntu-14-04\/\" target=\"_blank\" rel=\"noopener noreferrer\"><strong>Install OSSEC on Ubuntu 14.04<\/strong><\/a> tutorial.<\/p>\n<p>In the first part, we installed OSSEC as server and it&#8217;s web user interface on an\u00a0<a href=\"https:\/\/www.rosehosting.com\/ubuntu-hosting.html\" target=\"_blank\" rel=\"noopener noreferrer\">Ubuntu 14.04 VPS<\/a>.<!--more--><\/p>\n<p>Today, we will install the Analogi Web Dashboard and cover the OSSEC agent installation on another <a href=\"https:\/\/www.rosehosting.com\/ubuntu-hosting.html\" target=\"_blank\" rel=\"noopener noreferrer\">Ubuntu 14.04 VPS<\/a>. Then we will add the installed agent (client) to the OSSEC server.<\/p>\n<p>So, let&#8217;s start.<\/p>\n<p>Log in to the <a href=\"https:\/\/www.rosehosting.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Linux VPS<\/a> where you installed OSSEC as server:<\/p>\n<pre># ssh root@server_ip<\/pre>\n<p>Update the package index and check whether you have available upgrades for the server:<\/p>\n<pre># apt-get update &amp;&amp; apt-get upgrade<\/pre>\n<p>Once that is out of the picture, let&#8217;s install the Analogi Web Dashboard. Enter the default document root for Apache which is &#8216;\/var\/www\/html&#8217; :<\/p>\n<pre># cd \/var\/www\/html\/<\/pre>\n<p>Clone the Analogi GIT repo:<\/p>\n<pre># git clone https:\/\/github.com\/ECSC\/analogi.git<\/pre>\n<p>Copy the database config file and modify the database settings with the values of the database created in part one of this tutorial:<\/p>\n<pre># cp analogi\/db_ossec.php.new analogi\/db_ossec.php\r\n\r\n# nano analogi\/db_ossec.php<\/pre>\n<p>Once you modify the values, they should look like this:<\/p>\n<pre>define ('DB_USER_O', 'ossecuser');\r\ndefine ('DB_PASSWORD_O', 'your_password');\r\ndefine ('DB_HOST_O', '127.0.0.1');\r\ndefine ('DB_NAME_O', 'ossec');<\/pre>\n<p>Save and close the file.<\/p>\n<p>You can now visit the Analogi dashboard from your favorite web browser. Open http:\/\/your_IP_address\/analogi<\/p>\n<p><strong>OSSEC AGENT INSTALLATION<\/strong><\/p>\n<p>Next, you need to install OSSEC as agent on your other Ubuntu instance. But first, install the modules as shown in the first part of this tutorial. If you happen to already have the LAMP stack installed on your <a href=\"https:\/\/www.rosehosting.com\/ubuntu-hosting.html\" target=\"_blank\" rel=\"noopener noreferrer\">Ubuntu 14.04<\/a> instance, then proceed and execute the following command:<\/p>\n<pre># apt-get install libmysqlclient-dev libapache2-mod-php5 php5-mysql php5-curl php5-gd php5-intl php-pear php5-imagick php5-imap php5-mcrypt php5-memcache php5-ming php5-ps php5-pspell php5-recode php5-snmp php5-sqlite php5-tidy php5-xmlrpc php5-xsl<\/pre>\n<p>Download OSSEC into the\u00a0&#8216;\/opt&#8217; directory, unpack the archive and enter the unpacked directory:<\/p>\n<pre># cd \/opt\r\n\r\n# wget https:\/\/bintray.com\/artifact\/download\/ossec\/ossec-hids\/ossec-hids-2.8.3.tar.gz\r\n\r\n# tar -xzf ossec-hids-2.8.3.tar.gz\r\n\r\n# cd ossec-hids-2.8.3<\/pre>\n<p>Now, start the OSSEC installation script and follow the easy instructions as shown in the output below:<\/p>\n<pre># .\/install.sh<\/pre>\n<pre>1- What kind of installation do you want (server, agent, local, hybrid or help)? <strong>agent<\/strong>\r\n\r\n  - Agent(client) installation chosen.\r\n\r\n2- Setting up the installation environment.\r\n\r\n - Choose where to install the OSSEC HIDS [\/var\/ossec]:\r\n\r\n    - Installation will be made at  \/var\/ossec .\r\n\r\n3- Configuring the OSSEC HIDS.\r\n\r\n  3.1- What's the IP Address or hostname of the OSSEC HIDS server?: <strong>enter the IP address of the OSSEC server machine<\/strong>\r\n\r\n   - Adding Server IP xxx.xxx.xx.xxx\r\n\r\n  3.2- Do you want to run the integrity check daemon? (y\/n) [y]:\r\n\r\n   - Running syscheck (integrity check daemon).\r\n\r\n  3.3- Do you want to run the rootkit detection engine? (y\/n) [y]:\r\n\r\n   - Running rootcheck (rootkit detection).\r\n\r\n  3.4 - Do you want to enable active response? (y\/n) [y]:\r\n\r\n\r\n  3.5- Setting the configuration to analyze the following logs:\r\n    -- \/var\/log\/messages\r\n    -- \/var\/log\/auth.log\r\n    -- \/var\/log\/syslog\r\n    -- \/var\/log\/mail.info\r\n    -- \/var\/log\/dpkg.log\r\n    -- \/var\/log\/apache2\/error.log (apache log)\r\n    -- \/var\/log\/apache2\/access.log (apache log)\r\n\r\n - If you want to monitor any other file, just change\r\n   the ossec.conf and add a new localfile entry.\r\n   Any questions about the configuration can be answered\r\n   by visiting us online at http:\/\/www.ossec.net .\r\n\r\n\r\n   - System is Debian (Ubuntu or derivative).\r\n - Init script modified to start OSSEC HIDS during boot.\r\n\r\n - Configuration finished properly.\r\n\r\n - To start OSSEC HIDS:\r\n                \/var\/ossec\/bin\/ossec-control start\r\n\r\n - To stop OSSEC HIDS:\r\n                \/var\/ossec\/bin\/ossec-control stop\r\n\r\n - The configuration can be viewed or modified at \/var\/ossec\/etc\/ossec.conf\r\n\r\n\r\n    Thanks for using the OSSEC HIDS.\r\n    If you have any question, suggestion or if you find any bug,\r\n    contact us at contact@ossec.net or using our public maillist at\r\n    ossec-list@ossec.net\r\n    ( http:\/\/www.ossec.net\/main\/support\/ ).\r\n\r\n    More information can be found at http:\/\/www.ossec.net\r\n\r\n    ---  Press ENTER to finish (maybe more information below). ---\r\n\r\n- You first need to add this agent to the server so they\r\n   can communicate with each other. When you have done so,\r\n   you can run the 'manage_agents' tool to import the\r\n   authentication key from the server.\r\n\r\n   \/var\/ossec\/bin\/manage_agents<\/pre>\n<p>As the above statement shows, you should now add the agent to the OSSEC server. Go back to your OSSEC server console and generate a key for the agent. Use the below command:<\/p>\n<pre># \/var\/ossec\/bin\/manage_agents<\/pre>\n<p>Now choose the A option, enter the name for the new agent, it&#8217;s IP address and ID. Follow the underneath output:<\/p>\n<pre>****************************************\r\n* OSSEC HIDS v2.8.3 Agent manager.     *\r\n* The following options are available: *\r\n****************************************\r\n   (A)dd an agent (A).\r\n   (E)xtract key for an agent (E).\r\n   (L)ist already added agents (L).\r\n   (R)emove an agent (R).\r\n   (Q)uit.\r\nChoose your action: A,E,L,R or Q: <strong>A<\/strong>\r\n\r\n- Adding a new agent (use '\\q' to return to the main menu).\r\n  Please provide the following:\r\n   * A name for the new agent: <strong>ossec-client<\/strong>\r\n   * The IP Address of the new agent: <strong>here you should enter the IP address of the OSSEC agent<\/strong>\r\n   * An ID for the new agent[001]:\r\nAgent information:\r\n   ID:001\r\n   Name:ossec-client\r\n   IP Address:xxx.xx.xxx.xxx\r\n\r\nConfirm adding it?(y\/n): <strong>y<\/strong>\r\nAgent added.<\/pre>\n<p>Run the <strong>\/var\/ossec\/bin\/manage_agents<\/strong> command again and extract the key for the agent:<\/p>\n<pre># \/var\/ossec\/bin\/manage_agents\r\n\r\n****************************************\r\n* OSSEC HIDS v2.8.3 Agent manager.     *\r\n* The following options are available: *\r\n****************************************\r\n   (A)dd an agent (A).\r\n   (E)xtract key for an agent (E).\r\n   (L)ist already added agents (L).\r\n   (R)emove an agent (R).\r\n   (Q)uit.\r\nChoose your action: A,E,L,R or Q: <strong>E<\/strong>\r\n\r\nAvailable agents:\r\n   ID: 001, Name: ossec-client, IP: enter the IP address of the OSSEC agent\r\nProvide the ID of the agent to extract the key (or '\\q' to quit): <strong>001<\/strong>\r\n\r\nAgent key information for '001' is:\r\n<strong>MDAxIG9==......<\/strong>\r\n\r\n** Press ENTER to return to the main menu.<\/pre>\n<p>Copy the key and switch to your OSSEC agent console. Execute the \/var\/ossec\/bin\/manage_agents command:<\/p>\n<pre># \/var\/ossec\/bin\/manage_agents\r\n\r\n****************************************\r\n* OSSEC HIDS v2.8.3 Agent manager.     *\r\n* The following options are available: *\r\n****************************************\r\n   (I)mport key from the server (I).\r\n   (Q)uit.\r\nChoose your action: I or Q: <strong>I<\/strong>\r\n\r\n* Provide the Key generated by the server.\r\n* The best approach is to cut and paste it.\r\n*** OBS: Do not include spaces or new lines.\r\n\r\nPaste it here (or '\\q' to quit): <strong>paste the key that you generated on your OSSEC server<\/strong>\r\n\r\nAgent information:\r\n   ID:001\r\n   Name:ossec-client\r\n   IP Address: <strong>IP address of the OSSEC agent<\/strong>\r\n\r\nConfirm adding it?(y\/n): y\r\nAdded.<\/pre>\n<p>You can check the OSSEC config file to see if the OSSEC server has been added successfully:<\/p>\n<pre># nano \/var\/ossec\/etc\/ossec.conf<\/pre>\n<p>The IP address of the OSSEC server is added at the beginning of the file:<\/p>\n<pre>&lt;client&gt;\r\n\u00a0 &lt;server-hostname&gt;xxx.xxx.xx.xxx&lt;\/server-hostname&gt;\r\n&lt;\/client&gt;<\/pre>\n<p>Once that is done, restart OSSEC on both server and agent machines:<\/p>\n<pre># \/var\/ossec\/bin\/ossec-control restart<\/pre>\n<p>You can now monitor the agent from either the standard <strong>Web UI<\/strong> or the <strong>Analogi dashboard<\/strong>. It is up to you. Of course OSSEC is a complex intrusion detection system and you can twitch it&#8217;s configuration and agents, so for more info please check OSSEC thorough <a href=\"http:\/\/ossec-docs.readthedocs.org\/en\/latest\/index.html\" target=\"_blank\" rel=\"noopener noreferrer\">documentation<\/a>.<\/p>\n<p>Congratulations. You have successfully configured and integrated an OSSEC agent with the OSSEC server. You should follow this same procedure if you want to add another agent to OSSEC.<\/p>\n<p>Of course you don\u2019t have to do any of this if you use one of our <a href=\"https:\/\/www.rosehosting.com\/managed-vps-hosting.html\" target=\"_blank\" rel=\"noopener noreferrer\">Linux VPS Hosting<\/a> services, in which case you can simply ask our expert Linux admins to do this for you. They are available 24\u00d77 and will take care of your request immediately.<\/p>\n<p><span style=\"color: #ff0000;\"><strong>PS<\/strong><span style=\"color: #000000;\">.<\/span><\/span> If you liked this post please share it with your friends on the social networks using the buttons on the left or simply leave a reply below. Thanks.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This article is the second part of our Install OSSEC on Ubuntu 14.04 tutorial. In the first part, we installed &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"Install OSSEC agent on Ubuntu 14.04\" class=\"read-more button\" href=\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#more-18468\" aria-label=\"Read more about Install OSSEC agent on Ubuntu 14.04\">Read More<\/a><\/p>\n","protected":false},"author":4,"featured_media":18429,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1703,13,1698],"tags":[1050,1049,324,1068,1053,1052],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Install OSSEC agent on Ubuntu 14.04 - RoseHosting<\/title>\n<meta name=\"description\" content=\"Install OSSEC agent on Ubuntu 14.04 - RoseHosting\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Install OSSEC agent on Ubuntu 14.04 - RoseHosting\" \/>\n<meta property=\"og:description\" content=\"Install OSSEC agent on Ubuntu 14.04 - RoseHosting\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/\" \/>\n<meta property=\"og:site_name\" content=\"RoseHosting\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/RoseHosting\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/rosehosting.helpdesk\" \/>\n<meta property=\"article:published_time\" content=\"2016-01-30T17:09:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-06-03T08:43:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2016\/01\/ossec.png\" \/>\n\t<meta property=\"og:image:width\" content=\"191\" \/>\n\t<meta property=\"og:image:height\" content=\"67\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Jeff Wilson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@rosehosting\" \/>\n<meta name=\"twitter:site\" content=\"@rosehosting\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jeff Wilson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/\"},\"author\":{\"name\":\"Jeff Wilson\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#\/schema\/person\/7ce77a842fa6a9a7f8efa186f2353713\"},\"headline\":\"Install OSSEC agent on Ubuntu 14.04\",\"datePublished\":\"2016-01-30T17:09:23+00:00\",\"dateModified\":\"2022-06-03T08:43:51+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/\"},\"wordCount\":550,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2016\/01\/ossec.png\",\"keywords\":[\"file integrity checking\",\"log analysis\",\"monitoring\",\"ossec policy monitoring\",\"real-time alerting\",\"rootkit detection\"],\"articleSection\":[\"Security\",\"Tutorials\",\"Ubuntu\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/\",\"url\":\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/\",\"name\":\"Install OSSEC agent on Ubuntu 14.04 - RoseHosting\",\"isPartOf\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2016\/01\/ossec.png\",\"datePublished\":\"2016-01-30T17:09:23+00:00\",\"dateModified\":\"2022-06-03T08:43:51+00:00\",\"description\":\"Install OSSEC agent on Ubuntu 14.04 - RoseHosting\",\"breadcrumb\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#primaryimage\",\"url\":\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2016\/01\/ossec.png\",\"contentUrl\":\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2016\/01\/ossec.png\",\"width\":191,\"height\":67},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.rosehosting.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Install OSSEC agent on Ubuntu 14.04\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#website\",\"url\":\"https:\/\/www.rosehosting.com\/blog\/\",\"name\":\"RoseHosting\",\"description\":\"Premium Linux Tutorials Since 2001\",\"publisher\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.rosehosting.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#organization\",\"name\":\"RoseHosting\",\"url\":\"https:\/\/www.rosehosting.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2022\/03\/android-chrome-192x192-1.png\",\"contentUrl\":\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2022\/03\/android-chrome-192x192-1.png\",\"width\":192,\"height\":192,\"caption\":\"RoseHosting\"},\"image\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/RoseHosting\",\"https:\/\/x.com\/rosehosting\",\"https:\/\/www.linkedin.com\/in\/rosehosting\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#\/schema\/person\/7ce77a842fa6a9a7f8efa186f2353713\",\"name\":\"Jeff Wilson\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/09271207587f897ab46faaed9b355252?s=96&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/09271207587f897ab46faaed9b355252?s=96&r=g\",\"caption\":\"Jeff Wilson\"},\"description\":\"An experienced Linux veteran with many years of experience. Helping other Linux admins with frequent Linux and business-related blog posts on the RoseHosting blog. Techie by choice. Loving nature and travel. Happily married and father of two lovely children.\",\"sameAs\":[\"https:\/\/www.rosehosting.com\",\"https:\/\/www.facebook.com\/rosehosting.helpdesk\"],\"url\":\"https:\/\/www.rosehosting.com\/blog\/author\/jwilson\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Install OSSEC agent on Ubuntu 14.04 - RoseHosting","description":"Install OSSEC agent on Ubuntu 14.04 - RoseHosting","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/","og_locale":"en_US","og_type":"article","og_title":"Install OSSEC agent on Ubuntu 14.04 - RoseHosting","og_description":"Install OSSEC agent on Ubuntu 14.04 - RoseHosting","og_url":"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/","og_site_name":"RoseHosting","article_publisher":"https:\/\/www.facebook.com\/RoseHosting","article_author":"https:\/\/www.facebook.com\/rosehosting.helpdesk","article_published_time":"2016-01-30T17:09:23+00:00","article_modified_time":"2022-06-03T08:43:51+00:00","og_image":[{"width":191,"height":67,"url":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2016\/01\/ossec.png","type":"image\/png"}],"author":"Jeff Wilson","twitter_card":"summary_large_image","twitter_creator":"@rosehosting","twitter_site":"@rosehosting","twitter_misc":{"Written by":"Jeff Wilson","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#article","isPartOf":{"@id":"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/"},"author":{"name":"Jeff Wilson","@id":"https:\/\/www.rosehosting.com\/blog\/#\/schema\/person\/7ce77a842fa6a9a7f8efa186f2353713"},"headline":"Install OSSEC agent on Ubuntu 14.04","datePublished":"2016-01-30T17:09:23+00:00","dateModified":"2022-06-03T08:43:51+00:00","mainEntityOfPage":{"@id":"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/"},"wordCount":550,"commentCount":0,"publisher":{"@id":"https:\/\/www.rosehosting.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2016\/01\/ossec.png","keywords":["file integrity checking","log analysis","monitoring","ossec policy monitoring","real-time alerting","rootkit detection"],"articleSection":["Security","Tutorials","Ubuntu"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/","url":"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/","name":"Install OSSEC agent on Ubuntu 14.04 - RoseHosting","isPartOf":{"@id":"https:\/\/www.rosehosting.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#primaryimage"},"image":{"@id":"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2016\/01\/ossec.png","datePublished":"2016-01-30T17:09:23+00:00","dateModified":"2022-06-03T08:43:51+00:00","description":"Install OSSEC agent on Ubuntu 14.04 - RoseHosting","breadcrumb":{"@id":"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#primaryimage","url":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2016\/01\/ossec.png","contentUrl":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2016\/01\/ossec.png","width":191,"height":67},{"@type":"BreadcrumbList","@id":"https:\/\/www.rosehosting.com\/blog\/install-ossec-agent-on-ubuntu-14-04\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.rosehosting.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Install OSSEC agent on Ubuntu 14.04"}]},{"@type":"WebSite","@id":"https:\/\/www.rosehosting.com\/blog\/#website","url":"https:\/\/www.rosehosting.com\/blog\/","name":"RoseHosting","description":"Premium Linux Tutorials Since 2001","publisher":{"@id":"https:\/\/www.rosehosting.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.rosehosting.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.rosehosting.com\/blog\/#organization","name":"RoseHosting","url":"https:\/\/www.rosehosting.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosehosting.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2022\/03\/android-chrome-192x192-1.png","contentUrl":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2022\/03\/android-chrome-192x192-1.png","width":192,"height":192,"caption":"RoseHosting"},"image":{"@id":"https:\/\/www.rosehosting.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/RoseHosting","https:\/\/x.com\/rosehosting","https:\/\/www.linkedin.com\/in\/rosehosting\/"]},{"@type":"Person","@id":"https:\/\/www.rosehosting.com\/blog\/#\/schema\/person\/7ce77a842fa6a9a7f8efa186f2353713","name":"Jeff Wilson","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosehosting.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/09271207587f897ab46faaed9b355252?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/09271207587f897ab46faaed9b355252?s=96&r=g","caption":"Jeff Wilson"},"description":"An experienced Linux veteran with many years of experience. Helping other Linux admins with frequent Linux and business-related blog posts on the RoseHosting blog. Techie by choice. Loving nature and travel. Happily married and father of two lovely children.","sameAs":["https:\/\/www.rosehosting.com","https:\/\/www.facebook.com\/rosehosting.helpdesk"],"url":"https:\/\/www.rosehosting.com\/blog\/author\/jwilson\/"}]}},"_links":{"self":[{"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/posts\/18468"}],"collection":[{"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/comments?post=18468"}],"version-history":[{"count":1,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/posts\/18468\/revisions"}],"predecessor-version":[{"id":42019,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/posts\/18468\/revisions\/42019"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/media\/18429"}],"wp:attachment":[{"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/media?parent=18468"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/categories?post=18468"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/tags?post=18468"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}