Oops, nevermind. The key wan't properly imported into the agent.. it's working fine now and sending syslog alerts to the OSSEC server.
On Apr 24, 11:14 am, [email protected] wrote: > Greetings, > > I've installed the OSSEC 2.0 agent on AIX 5.3, and am getting the > following error upon startup: > > # /var/ossec/bin/ossec-control start > Starting OSSEC HIDS v2.0 (by Third Brigade, Inc.)... > Started ossec-execd... > Started ossec-agentd... > 2009/04/24 09:48:02 ossec-logcollector(1905): INFO: No file configured > to monitor. > Started ossec-logcollector... > 2009/04/24 09:48:05 ossec-syscheckd(1210): ERROR: Queue '/var/ossec/ > queue/ossec/ queue' not accessible: 'Connection refused'. > 2009/04/24 09:48:05 ossec-rootcheck(1210): ERROR: Queue '/var/ossec/ > queue/ossec/ queue' not accessible: 'Connection refused'. > 2009/04/24 09:48:13 ossec-syscheckd(1210): ERROR: Queue '/var/ossec/ > queue/ossec/ queue' not accessible: 'Connection refused'. > 2009/04/24 09:48:13 ossec-rootcheck(1210): ERROR: Queue '/var/ossec/ > queue/ossec/ queue' not accessible: 'Connection refused'. > 2009/04/24 09:48:26 ossec-syscheckd(1210): ERROR: Queue '/var/ossec/ > queue/ossec/ queue' not accessible: 'Connection refused'. > 2009/04/24 09:48:26 ossec-rootcheck(1211): ERROR: Unable to access > queue: '/var/ossec/queue/ossec/queue'. Giving up.. > > analysisd is confirmed running, and the ossec user has full access to > the entire directory structure. Any clues?
