Sorry for this late response. Problem continues. When I try to start
agent using ossec-control command, same error is returned:
Starting OSSEC HIDS v3.3.0...
OSSEC analysisd: Testing rules failed. Configuration error. Exiting.
On the other side, removing entries about port and protocol in agent
I think we need more info!
Do any errors appear in ossec.log?
My ossec.log is in /usr/local/ossec-hids/logs
When I've had configuration errors popup, ossec writes some pretty detailed
stuff. For example:
2019/05/05 18:42:53 ossec-monitord(1230): ERROR: Invalid element in the
configuration: