Hi Fred,
Sorry by the delay replying to you. Are these agents on Windows or Linux? If you
look at the server, these should be one file for each agent at the
/var/ossec/queue/syscheck/ directory. Do you see anything in there?
Btw,
we fixed many bugs on the latest version, so upgrading to 0.9-3 may help.
Thanks,
--
Daniel B. Cid
dcid ( at ) ossec.net
On 11/3/06, Fred <[EMAIL PROTECTED]> wrote:
Hi everybody,
I have 14 OSSEC Agents, version 0.9.2. On each of them Syscheck is "heavily"
configured (checking "all" on many directories). But no alerts yet, after
several weeks.
So, I would like to know how to check what's wrong:
- I put sysckeck debugging to 1 for some agents
- where should be stored checksum database (agent, server, which file) ?
If database doesn't exist, what could be the problem ?
- .....?
In Agents and Server logs, I don't have any errors, and other alerts are ok.
Thanks very much.
Fred
