To gain visibility into what is going on at the agent side, turn on debug 
mode on the agent.

In C:\Program Files (x86)\ossec-agent\internal_options.conf change:

# Windows debug (used by the windows agent)
windows.debug=0
to
# Windows debug (used by the windows agent)
windows.debug=2

and restart the agent. It will log all events it picks up in the agent log 
file: C:\Program Files (x86)\ossec-agent\ossec.log (Don't do it on a busy 
production system!)

By examining events in ossec.log, you will know what the agent is picking 
up, and should be able to determine whether you are faced with an agent 
issue, or a server issue.

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to