Ossec Reviews

It is open source based and easy to use.

We have to build our own rpm packages so we can use ossec on centos or rhel based systems.

Ossec is a good and easy start for security compliance when you want to deploy log analysis.

Log analysis and file integrity checking.

– Agent runs on Windows, Linux, and macOS this is amazing

– Server and agent communicates via encrypted messages increase security comunication

- Can be integrated with Slack and PagerDuty for alerting

- Can be integrated with ELK

.File integrity monitoring

Logs review

Attacks identification

web ui need to improve

.Log Management, Rules syntax, the detection mechanism of the OSSEC are very great and it made me learn more about IDPS

There is no Metrics Dashboard to moniter the events

user monitoring, file system modifications

.This is an easy to install login monitoring tool , which is very helpful for all organization for intrusion detection and log analysis, as a personal user of this tool, i like all the features this tool provides

i personally doesn't feel any dislike or drawback for this tool because being an opensource tool it provides all features as a security professional needs, only thing have to focus more is to implement a User- interface for this tool

Currenly ossec is doing great job as ann open-source tool, in future please implement User interface too, it will be more helpful for professionals or individual who doesnt familar with command line

As a

This tool gives us the ability to monitor our point of sale systems for intrusion and log this important data in order to remain in compliance with PCI-DSS standards. The ideal aspects of this tool are that you can easily deploy this to many clients and manage the monitoring for these clients centrally on the server. The best part is this software is free and open source. So all you have to supply is the hardware required to run this virtually.

There isn’t a dashboard for this software. There used to be long ago when it was originally developed. Unfortunately there aren’t many options for data visualization, so you’re relying on email notification and log files on the server to look into potential threats. There was a plug-in for Splunk, but with recent version of OSSEC it appears that it’s no longer supported. Supposedly you can do some visualization with Loki, Prometheus, and Grafana (other open source tools).

As long as you’re okay with creating your own dashboard or using the command line to view logging, then it’s an excellent product.

The only issues we’ve had is the lack of a dashboard. Otherwise the product functions as it should. The benefits of the product were simply that it gives us some visibility into potential threats on point of sale machines and makes us compliant.

I like the file modification monitoring. It can do hashes of files like tripwire and periodically checks the files for modification.

The management is very command line oriented.

This is a low cost and effective file integrity monitoring tool. It also can do various levels of host level protection including log monitoring, root kit checks and active responses.

File integrity monitoring is what we use it for.

i like the easy way to configure ossec, and how it helps to monitoring and keep tracking of everything on a server.

i would like to have an easy deployment in linux like the windows deployment.

its easy to deploy and its open source.

log management, log analysis, its pretty good tool to monitoring your servers

First that is an open source project! Second is how the product interacts with my servers, protecting and alarming at every time something or someone does wrong.

The web interface is no longer maintained so at the moment, there's no web interface. But you always send your data to Kibana and have graphs available.

Use and install in all your servers and workstations, get all the logs needed in a central location!

We're solving security problems by using OSSEC as our Intrusion Detection System.