I have a doubt!
If we put OSSEC as an agent, in a web application for example, which runs on Docker, and this Docker is scalling with 10 containers, for example ..
Will the Ossec server accept multiple instances by sending data with the same ID? will we have any problems in this regard?
Or would it be ideal to place the application logs in Docker on local volumes and place the Ossec agent on the Host?
Support/Development for OSSEC