Centralized management system?

[ehansen]

Which centralized management system do you use? By this I mean systems like OSSIM, OSSEC WUI, etc... (to a lesser extent Nagios).

I use OSSEC WUI mostly but I've tinkered with OSSIM and love it so far. I'm also looking for a solution that's basically OSSIM, but isn't its own distro and is also free.

 

[Rob]

Does the ossec one make you log into each server to view info or can you set up a central one that grabs info from all of them?

 

[ehansen]

Does the ossec one make you log into each server to view info or can you set up a central one that grabs info from all of them?

Kind of no and no, but yes at the same time. No, you don't log into each server, but it doesn't graph either (as far as I've seen). You access it from a local address, and it displays recent file activity (OSSEC is a file integrity tool at heart), and you can also browse all the hashes and files its monitoring.

Yes as in its a centralized management for file integrity, so you can view all the files by any sensor/agent.