Re: [ossec-list] Agents Disconnected

Hello dan, I did that you recommend me but the problem still keep going. The only that appears connect is ID: 000, Name: vknxsegfim (server), IP: 127.0.0.1, Active/Local and the logs dont help me so mucho XD Regards El miércoles, 9 de agosto de 2017, 15:54:45 (UTC-5), dan (ddpbsd) escribió: >

Re: [ossec-list] Agents Disconnected

On Mon, Aug 7, 2017 at 10:49 AM, Carlos Islas wrote: > > Thank you Dan, > > Sorry but i still confuse, I dont want to do something that get worse this > situation. Do you have any idea to fix the error? > 2 temporary fixes are to either stop the OSSEC server processes,

Re: [ossec-list] Agents Disconnected

Thank you Dan, Sorry but i still confuse, I dont want to do something that get worse this situation. Do you have any idea to fix the error? Regards... El viernes, 4 de agosto de 2017, 12:20:15 (UTC-5), dan (ddpbsd) escribió: > > On Fri, Aug 4, 2017 at 11:59 AM, Carlos Islas

Re: [ossec-list] Agents Disconnected

On Fri, Aug 4, 2017 at 11:59 AM, Carlos Islas wrote: > Hi! > > The manager hasn´t agent. The alerts came from the other host. > > root@vknxsegfim:/var/ossec/bin# ./agent_control -lc > > OSSEC HIDS agent_control. List of available agents: >ID: 000, Name: vknxsegfim

Re: [ossec-list] Agents Disconnected

Hi! The manager hasn´t agent. The alerts came from the other host. root@vknxsegfim:/var/ossec/bin# ./agent_control -lc OSSEC HIDS agent_control. List of available agents: ID: 000, Name: vknxsegfim (server), IP: 127.0.0.1, Active/Local but i dont know why all the host appear disconnected

Re: [ossec-list] Agents Disconnected

Hi Carlos, The manager has his own agent, probably the alerts are from the manager it self. Regards --- Jose Luis Ruiz Wazuh Inc. j...@wazuh.com On August 3, 2017 at 7:57:59 PM, Carlos Islas (sparks.10008...@gmail.com) wrote: In adition the host send alerts to my email

Re: [ossec-list] Agents Disconnected

Hi Carlos, Looking your logs seems like you have a problem with Duplicated counters, i think you have two options to fix this error: 1.- You can edit the file /var/ossec/etc/internal-options.conf check the value *remoted.verify_msg_id* and set to 0 in both sides, manager and agents and restart

Re: [ossec-list] Agents Disconnected

In adition the host send alerts to my email but still disconnected... how can it be? =S El jueves, 3 de agosto de 2017, 12:48:04 (UTC-5), Carlos Islas escribió: > > Hi Jose, > > Thanks for your answer, i send you the log: > > 2017/08/01 13:44:10 ossec-remoted(1103): ERROR: Unable to open

Re: [ossec-list] Agents Disconnected

Hi Jose, Thanks for your answer, i send you the log: 2017/08/01 13:44:10 ossec-remoted(1103): ERROR: Unable to open file '/queue/rids /001'. 2017/08/01 15:19:33 ossec-remoted(1103): ERROR: Unable to open file

Re: [ossec-list] Agents Disconnected

Hi Carlos, Take a look from the log file /var/ossec/logs/ossec.log, this is the main log file for managers and agents. You can do something like *cat /var/ossec/logs/ossec.log | grep ERROR, *to verify if you have errors in some point. Regards --- Jose Luis Ruiz Wazuh Inc.

[ossec-list] Agents Disconnected

Good day, I am having a trouble with OSSEC v2.8.3. I had added more or less 20 hosts and it were reporting correctly in my server but now all the agents appears disconnected. I tried to restart it remotely and local but dont show the Status Active this using the command ./agent_control -lc

[ossec-list] agents disconnected

You have a MGIC Secure Email message from michael_barr...@mgic.com. To view the secure message, click here [1]. Do not reply to this notification message. This notification message was auto-generated by the sender's security system. To reply to the sender, please go to your secure message by