Hi DM, Can you give us a bit more information?
-Are you running ossec local (or agent/server type)? -Show us the content of /var/ossec/logs/active-responses.log (active responses are logged in there) and from /var/ossec/logs/ossec.log. -Show us the alert (from /var/ossec/logs/alerts/alerts.log) that was supposed to generate a response. I think that should help us understand what is going on... Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Sat, Feb 23, 2008 at 10:14 AM, <[EMAIL PROTECTED]> wrote: > > Daniel, > Can you please suggest something? Why active response not working in fresh > ossec install? > > Thanks > Regards, > DM > >
