active response script for OSSEC(https://www.ossec.net/), written in perl, to send jabber(xmpp) messages of certain alerts.
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Dominik Meyer 28509dd03d
ADD: deactivated tests for the moment
4 years ago
bin ADD: added first version of the script 4 years ago
.gitignore ADD: ignore some files 4 years ago
LICENSE.txt ADD: added LICENSE.txt for git repository 4 years ago
README.md ADD: updated README.md 4 years ago
dist.ini ADD: deactivated tests for the moment 4 years ago

README.md

OSSEC-Jabber

Description

This is an active response script for OSSEC(https://www.ossec.net/), written in perl, to send jabber(xmpp) messages of certain alerts.

Requirements

  • Perl
  • sendxmpp program
  • OSSEC Perl Module

INSTALL

Stable Version

The stable version can always be installed from CPAN using the cpan tool of your linux distribution.

Git install

For installing fresh from the git repository you need a perl installation including the Dist::Zilla package. The use of plenv(https://github.com/tokuhirom/plenv) is encouraged.

git clone https://gitcloud.federationhq.de/byterazor/App-OSSEC-Jabber.git
cd App-OSSEC-Jabber
dzil build
cpanm App-OSSEC-Jaber<version>.tar.gz

OSSEC specific

  • Please link the script into your OSSEC active response bin directory to be able to execute it.
  • configure the command in your ossec.conf
  • configure the active response for every alert leve/ rule you want the command to be triggert
  • place a jabber.conf file in your ossec etc directory

Example jabber.conf

<config>
  <options>-t</options>
  <recipients>
    <recipient>your@jabber.de</recipient>
  </recipients>
</config>

sendxmpp

Plase make sure sendxmpp is installed and you have a working configuration to send jabber messages to your recipients.

Author

Dominik Meyer dmeyer@federationhq.de

LICENSE

GPLv3