OSSEC service for Centos7

OSSEC can be called as Log-based Intrusion Detection System (LIDS). You will need nano / vim and wget install in CentOS. You can used below command to install them.

yum install wget
yum install nano

1. Let’s download OSSEC

wget -U ossec http://www.ossec.net/files/ossec-hids-2.8.2.tar.gz

2. unzip it
tar xf ossec-hids-2.8.2.tar.gz

3. Open host-deny.sh

vim active-response/host-deny.sh

4. Remove spaces in below location
eg:
TMP_FILE = "
TMP_FILE="

5. Install

sudo ./install.sh

 

6. Start ossec

/var/ossec/bin/ossec-control start

You can used below command to see the status of OSSEC

/var/ossec/bin/ossec-control status

 

NOTE
Usage: /var/ossec/bin/ossec-control {start|stop|restart|status|enable|disable}