OSSEC in Docker
Posted: Mon Jul 13, 2020 10:18 pm
I have a doubt!
If we put OSSEC as an agent, in a web application for example, which runs on Docker, and this Docker is scalling with 10 containers, for example ..
Will the Ossec server accept multiple instances by sending data with the same ID? will we have any problems in this regard?
Or would it be ideal to place the application logs in Docker on local volumes and place the Ossec agent on the Host?
Thank you!
If we put OSSEC as an agent, in a web application for example, which runs on Docker, and this Docker is scalling with 10 containers, for example ..
Will the Ossec server accept multiple instances by sending data with the same ID? will we have any problems in this regard?
Or would it be ideal to place the application logs in Docker on local volumes and place the Ossec agent on the Host?
Thank you!