get_ossec_configuration
Retrieve the OSSEC configuration, either the full config or a specific section like syscheck or rootcheck, for security monitoring analysis.
Instructions
Read the OSSEC configuration (ossec.conf).
Retrieves the parsed configuration. Can return the full config or a specific section.
Args: section: Optional configuration section to retrieve. Common sections: 'global', 'alerts', 'syscheck', 'rootcheck', 'localfile', 'remote', 'rules', 'command', 'active-response', 'syslog_output'. If not specified, returns the full configuration.
Returns: JSON object with the parsed configuration.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| section | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |