Hi Barry,
File /var/ossec/etc/local_decoder.xml must exist and contain at less one
decoder, although it is a dummy one, for example:
local_decoder_example
Try to create that file and fill it with the content above and restar ossec
with: /var/ossec/bin/ossec-control restart.
Hope it
Looks like the config entries for local_decor was the culprit. Not sure why
that did not cause a problem the first time ossec was installed.
On Wednesday, March 8, 2017 at 9:26:49 AM UTC+1, Barry Kaplan wrote:
>
> The only errors on ossec. log not about queues is
>
> 2017/03/08 08:06:38
Actually all the queue directories are empty.
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ossec-list+unsubscr...@googlegroups.com.
For more options,
