Re: [ossec-list] OSSEC WUI

2012-05-04 Thread Frank Stefan Sundberg Solli
Check the file permissions, and also your apache error.log On Fri, May 4, 2012 at 2:50 AM, Solayris solay...@gmail.com wrote: Hello, I have Apache 2.2 with PHP and ossec-wui installed on CentOS system. ossec-wui is in /var/www/htdocs/ directory. The DocumentRoot is set to /var/www/htdocs

[ossec-list] Re: Sample about generating a weekly report

2012-05-04 Thread C. L. Martinez
On Mon, Apr 30, 2012 at 1:06 PM, carlopmart carlopm...@gmail.com wrote: Hi all,  Somebody have a sample script to generate a weekly report? Thanks. Please any sample to launch a weekly report from cron??

[ossec-list] Re: OSSEC WUI

2012-05-04 Thread mikes
Try to set chcon (SELinux Context) for your wui installation. For example: # cd /var/www # restorecon * and try again. Other way, check your configuration (Allow from localhost , deny from all ? :)) W dniu piątek, 4 maja 2012 02:50:33 UTC+2 użytkownik Solayris napisał: Hello, I have

Re: [ossec-list] OSSEC WUI

2012-05-04 Thread sempai
I believe the assumption is that the user who wants the ossec-wui will be able to set file permissions correctly and read their web server error log. What did you see when you looked at the server error log? What permissions did you set on that directory and the files therein? On 3 May 2012,

Re: [ossec-list] Re: Sample about generating a weekly report

2012-05-04 Thread dan (ddp)
On Fri, May 4, 2012 at 3:04 AM, C. L. Martinez carlopm...@gmail.com wrote: On Mon, Apr 30, 2012 at 1:06 PM, carlopmart carlopm...@gmail.com wrote: Hi all,  Somebody have a sample script to generate a weekly report? Thanks. Please any sample to launch a weekly report from cron?? This

Re: [ossec-list] Comma in registry hive names

2012-05-04 Thread dan (ddp)
On Thu, May 3, 2012 at 3:50 PM, Michael Kleinpaste michael.kleinpa...@sharperlending.com wrote: Gave that a try and no dice.  \\ and // didn't have an effect.   Grrr. Did you try a single backslash? I have no idea if it'll work, I don't know if I've ever seen a comma in a registry entry. On

Re: [ossec-list] Re: Ossec 2.6 Compile errors on Mac Os 10.7.3

2012-05-04 Thread dan (ddp)
Yes, you need an MTA to send mail. It doesn't have to be on your OSSEC server, but ossec-maild doesn't support auth so it's often easier. On Wed, May 2, 2012 at 6:08 PM, Gappa gapp...@gmail.com wrote: anyone?

Re: [ossec-list] OSSEC WUI

2012-05-04 Thread Michael Wood
Sounds like a permissions issue. chown the directory for your webserver user. Not sure what it is on CentOS - apache or www-data On May 3, 2012 10:49 PM, Solayris solay...@gmail.com wrote: Hello, I have Apache 2.2 with PHP and ossec-wui installed on CentOS system. ossec-wui is in

Re: [ossec-list] Re: Sample about generating a weekly report

2012-05-04 Thread C. L. Martinez
On Fri, May 4, 2012 at 2:35 PM, dan (ddp) ddp...@gmail.com wrote: On Fri, May 4, 2012 at 3:04 AM, C. L. Martinez carlopm...@gmail.com wrote: On Mon, Apr 30, 2012 at 1:06 PM, carlopmart carlopm...@gmail.com wrote: Hi all,  Somebody have a sample script to generate a weekly report? Thanks.

[ossec-list] Decoding CEF log formats

2012-05-04 Thread carlopmart
Hi all, I am trying to write a new decoder to process CEF log formats, but I have a problems to escape '|'. For example: regex offset=after_prematch^\d\|\d+\|/regex doesn't works ... How can I escape '|' special character?? Thanks. -- CL Martinez carlopmart {at} gmail {d0t} com