Open-AudIT
https://www.open-audit.org/phpBB3/

feedback for v2.0.1
https://www.open-audit.org/phpBB3/viewtopic.php?f=20&t=6606
Page 1 of 1

Author:  shellz [ Thu Jul 06, 2017 10:47 pm ]
Post subject:  feedback for v2.0.1

Hello!
Firstly I would like to thanks for everything.
Open-Audit is an amazing software

I was having some problems with previous versions and decide upgrade to recent version but still not solved.

Two machines audit are updating one audit record and messing up everything

After some research, I set up the config below and everything worked 100%

match_dbus n
match_fqdn y
match_hostname n
match_hostname_dbus n
match_hostname_serial n
match_hostname_uuid n
match_ip y
match_mac n
match_mac_vmware n
match_serial n
match_serial_type n
match_uuid n



We have about 200 Windows machines and some servers

I hope it helps someone with same problem

Author:  Mark [ Fri Jul 07, 2017 9:11 am ]
Post subject:  Re: feedback for v2.0.1

Thanks for the feedback :-) Glad you like Open-AudIT!

The only comment I'd make is to be careful using match_ip. If you are auditing machines that use DHCP, they have the potential to get the same IP (at some point), which would cause a (bad) match.

Page 1 of 1 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/