Ossec常用命令

• 启动并查看httpd服务

systemctl start httpd

systemctl status httpd.service

• 启动并查看mysql服务

systemctl start mariadb

systemctl status mariadb.service

• 启动并查看sendmail服务

systemctl start  sendmail.service

systemctl status sendmail.service

• 批量重启apache、mysql、sendmail服务

for i in {httpd,mariadb,sendmail};do systemctl restart $i ;done

• 重新启动OSSEC

/opt/ossec/bin/ossec-control restart

• 查看OSSEC状态

/opt/ossec/bin/ossec-control status

• Web界面文件存放目录

/var/www/html/analogi

• apache应用的虚拟目录

/etc/httpd/conf.d/analogi.conf

• 客户端添加\导出Key

/opt/ossec/bin/manage_agents

• agent相关配置

/opt/ossec/bin/manage_agents

   (A)dd an agent (A).

   (E)xtract key for an agent (E).

   (L)ist already added agents (L).

   (R)emove an agent (R).

   (Q)uit.

Choose your action: A,E,L,R or Q: A

解决方法：
在php.ini里加上
date.timezone = "Asia/Shanghai"

date.timezone = PRC