NAME

ossec-jabber.pl - script to send ossec alerts through jabber as an active response

VERSION

version 0.1

SYNOPSIS

ossec-jabber [action] [username] [srcip] [alertid] [ruleid] [agent name] [filename] action: -help | -h brief help message

please read OSSEC documentation for all the parameters

DESCRIPTION

This program will search for the given alertid in the OSSEC mysql database and send it via sendxmpp through a jabber server.

NAME

ossec-jabber - send OSSEC alerts through jabber (XMPP) using sendxmpp commandline tool

DEPENDENCIES

sendxmpp

Please install sendxmpp and provide a working sendxmpp configuration file.

CONFIGURATION FILE

The configuration file has to be placed under OSSEC_BASE/etc/jabber.conf

Example

<config>
  <options>-t</options>
  <recipients>
    <recipient>byterazor@federationhq.de</recipient>
  </recipients>
</config>

AUTHOR

Domink Meyer <dmeyer@federationhq.de>

COPYRIGHT AND LICENSE

This software is Copyright (c) 2019 by Dominik Meyer.

This is free software, licensed under:

The GNU General Public License, Version 3, June 2007