Note: The following actions need to be set on the OSSEC server
First, download Analogi, store under/var/www/html/and give permission
[Email protected] ~]# wget https://github.com/ECSC/analogi/archive/master.zip
[Email protected] ~]# Unzip Master.zip
[Email protected] ~]# MV analogi-master//var/www/html/analogi
[Email protected] ~]# cd/var/www/html/
[Email protected] html]# chown-r Apache.apache analogi/
[Email protected] html]# CD analogi/
[email protected] analogi]# CP db_ossec.php.new db_ossec.php
Second, edit the db_ossec.php file, modify the configuration information of MySQL
Define ('Db_user_o','ossec');d Efine ('Db_password_o','ossec');d Efine ('Db_host_o','127.0.0.1');d Efine ('Db_name_o','ossec');
Third, modify Apache configuration, add virtual directory
[Email protected] analogi]# vim/etc/httpd/conf.d/analogi.conf
Add the following content:
/analogi/var/www/html/analogi<directory/var/www/html/analogi> Order Deny,allow fromany from192.168 . 0.0/</Directory>
And then restart Apache.
[Email protected] analogi]# systemctl restart httpd
Open source intrusion detection system OSSEC building three: Web Interface installation