We have several ossec servers running. We are testing now, and last night I checked and some of the daemons where off, and it was different for each server. Just curious if there is somewhere that explains what each daemon handles. I think I can guess what each one does, but just so I have a better understanding of the application I would like to know exactly. Also, in all the installations I have done so far "ossec-execd not running" is shown for all of them. I do have active response turned off, so I am guessing this is why?
Thank you, George