Re: [ossec-list] Ossec Active Response for ?

2019-01-04 Thread ram sri
On Saturday, January 5, 2019 at 11:20:21 AM UTC+5:30, dan (ddpbsd) wrote: > On Fri, Jan 4, 2019 at 5:54 PM ram sri wrote: > > > > > .cmd files won’t run on linux, it’s a windows script. > > > > Yes, but how can i run script for windows machine?  > &g

[ossec-list] Ossec Active Response support windows machine nr linux machine??

2019-01-04 Thread ram sri
Hi Friends I have one doubt about active response support s. Normally active response support ossec server and ossec agent. Is the ossec active response support windows machine and linux machine . Give me solutions for active response support. Thanks, -- --- You received this message

Re: [ossec-list] Ossec Active Response for ?

2019-01-05 Thread ram sri
On Saturday, January 5, 2019 at 9:57:22 PM UTC+5:30, dan (ddpbsd) wrote: > On Sat, Jan 5, 2019 at 11:06 AM ram sri wrote: > On Saturday, January 5, 2019 at 8:26:16 PM UTC+5:30, dan (ddpbsd) wrote: > > > On Sat, Jan 5, 2019 at 1:07 AM ram sri wrote: > > > On Saturday,

Re: [ossec-list] Ossec Active Response for ?

2019-01-05 Thread ram sri
On Saturday, January 5, 2019 at 8:26:16 PM UTC+5:30, dan (ddpbsd) wrote: > On Sat, Jan 5, 2019 at 1:07 AM ram sri wrote: > On Saturday, January 5, 2019 at 11:20:21 AM UTC+5:30, dan (ddpbsd) wrote: > > > On Fri, Jan 4, 2019 at 5:54 PM ram sri wrote: > > > > >

Re: [ossec-list] Ossec Active Response for ?

2019-01-05 Thread ram sri
On Sunday, January 6, 2019 at 12:00:44 AM UTC+5:30, dan (ddpbsd) wrote: > On Sat, Jan 5, 2019 at 11:39 AM ram sri wrote: > > > > On Saturday, January 5, 2019 at 9:57:22 PM UTC+5:30, dan (ddpbsd) wrote: > > > Is active response enabled on the windows agent? Were the ossec pr

[ossec-list] how to configure windows active response?

2019-01-10 Thread ram sri
Hi I have trouble configure with windows Active Response.Give me step wise procedure for route-null.cmd in ossec. when i connfigure like https://ossec-docs.readthedocs.io/en/latest/manual/ar/ar-windows.html . But it does not work. Thanks, -- --- You received this message because you are

[ossec-list] Re: how to configure windows active response?

2019-01-10 Thread ram sri
Hi Friends, How to fix this error "ossec-execd(1312): ERROR: Error executing '/var/ossec/active-response/bin/restart-ossec.cmd': Exec format error" Please give me solution for that error. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group.

Re: [ossec-list] Ossec Active Response for ?

2019-01-04 Thread ram sri
> > .cmd files won’t run on linux, it’s a windows script. > > Yes, but how can i run script for windows machine? > >> How do you have active response configured? > Same , i configured in ossec.conf (ossec server). > Which active response command are you trying to run? > I tried

[ossec-list] Ossec Active Response for ?

2019-01-04 Thread ram sri
Hi Friends, I had big doubt about Ossec Active Response Please Help Me.. Is the Ossec Active Response for only Ossec Server & Ossec Agent or else other Machine like Windows,Linux,Mac? Please clarify my doubt because all default script only run for Ossec server and Ossec agent. so, only i had

[ossec-list] How to fix ossec-execd(1312): ERROR: Error executing '/var/ossec/active-response/bin/restart-agent.cmd': Exec format error ?

2019-01-11 Thread ram sri
Hi I am struggle with same error "ossec-execd(1312): ERROR: Error executing '/var/ossec/active-response/bin/restart-agent.cmd': Exec format error" I configured same as what they give https://ossec-docs.readthedocs.io/en/latest/manual/ar/ar-windows.html but it not work. Please give me a

Re: [ossec-list] How to fix ossec-execd(1312): ERROR: Error executing '/var/ossec/active-response/bin/restart-agent.cmd': Exec format error ?

2019-01-11 Thread ram sri
Thank for Reply dan (ddpbsd). Sorry for again and again post same issue .Because its big issue for me .i struggle this error with two week .Please consider me and give me a solution for that error Thank you -- --- You received this message because you are subscribed to the Google Groups

Re: [ossec-list] How to fix ossec-execd(1312): ERROR: Error executing '/var/ossec/active-response/bin/restart-agent.cmd': Exec format error ?

2019-01-11 Thread ram sri
yes i tried reinstall agent and server also still that error will occur. Are you try this https://ossec-docs.readthedocs.io/en/latest/manual/ar/ar-windows.html in your side its working ?? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group.

[ossec-list] ossec-execd(1312): ERROR: Error executing '/var/ossec/active-response/bin/restart-agent.cmd': Permission denied

2019-01-03 Thread ram sri
Hi Friends, Please help how to fix this error "ossec-execd(1312): ERROR: Error executing '/var/ossec/active-response/bin/restart-agent.cmd': Permission denied". Ossec predefined commands are working but windows command copy from

Re: [ossec-list] Ossec Active Response for ?

2019-01-04 Thread ram sri
Thanks dan (ddpbsd) But i run pre-defined script of active response. Its only execute command on Ossec server(not executed in ossec-manager server also) and Ossec agent. Even this command https://ossec-docs.readthedocs.io/en/latest/manual/ar/ar-windows.html also not executed. Because of .cmd

Re: [ossec-list] How to Get System Information using Agent in Ossec?

2019-02-27 Thread ram sri
Ok dan ddpbsd but wazuh have module like syscollector and that use tag. Sameway we cant config in ossec? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: [ossec-list] How to Get System Information using Agent in Ossec?

2019-02-27 Thread ram sri
So no way to get system information through agent?? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more

Re: [ossec-list] How to Get System Information using Agent in Ossec?

2019-02-27 Thread ram sri
how to wodle integrate into ossec -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit

Re: [ossec-list] How to Get System Information using Agent in Ossec?

2019-02-27 Thread ram sri
Any other method is there in ossec? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit

[ossec-list] How to Get System Information using Agent in Ossec?

2019-02-21 Thread ram sri
Hi, How to get system information like OS details, RAM details and other Hardware details using agent in Ossec. Thank you, -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it,

Re: [ossec-list] How to Get System Information using Agent in Ossec?

2019-02-27 Thread ram sri
Ok dan(ddpbsd) thank you for your reply. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit