What intrusion detection systems for Linux are more functional?

Question

Information Security

Hello. Tell me, which intrusion detection systems are more functional and user-friendly? I tend to choose OSSEC, but perhaps there are some more interesting analogues?
Also interested in the question of the web-shell for the whole thing. The default for OSSEC does not look very convenient and informative, I saw an option with the output of information in Prelude, and from there to Prewikka, but somehow it is too confused, I would not really like to produce extra databases.

Answer 1

fail2ban

Answer 2

OSSEC is HIDS, what kind of intrusion system are we talking about? Specify exactly what and where you are going to monitor (what assets and where they are located), after that you can continue.
Without an additional database + visualization of information security monitoring does not exist.