active response script for OSSEC(https://www.ossec.net/), written in perl, to send jabber(xmpp) messages of certain alerts.

active-response jabber ossec

You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Go to file

Dominik Meyer 28509dd03d ADD: deactivated tests for the moment		4 years ago
bin	ADD: added first version of the script	4 years ago
.gitignore	ADD: ignore some files	4 years ago
LICENSE.txt	ADD: added LICENSE.txt for git repository	4 years ago
README.md	ADD: updated README.md	4 years ago
dist.ini	ADD: deactivated tests for the moment	4 years ago

README.md

OSSEC-Jabber

Description

This is an active response script for OSSEC(https://www.ossec.net/), written in perl, to send jabber(xmpp) messages of certain alerts.

Requirements

Perl
sendxmpp program
OSSEC Perl Module

INSTALL

Stable Version

The stable version can always be installed from CPAN using the cpan tool of your linux distribution.

Git install

For installing fresh from the git repository you need a perl installation including the Dist::Zilla package. The use of plenv(https://github.com/tokuhirom/plenv) is encouraged.

git clone https://gitcloud.federationhq.de/byterazor/App-OSSEC-Jabber.git
cd App-OSSEC-Jabber
dzil build
cpanm App-OSSEC-Jaber<version>.tar.gz

OSSEC specific

Please link the script into your OSSEC active response bin directory to be able to execute it.
configure the command in your ossec.conf
configure the active response for every alert leve/ rule you want the command to be triggert
place a jabber.conf file in your ossec etc directory

Example jabber.conf

<config>
  <options>-t</options>
  <recipients>
    <recipient>your@jabber.de</recipient>
  </recipients>
</config>

sendxmpp

Plase make sure sendxmpp is installed and you have a working configuration to send jabber messages to your recipients.

Author

Dominik Meyer dmeyer@federationhq.de

LICENSE

GPLv3