I am trying to run a custom command on my Windows client. The cmd
file is in the active-response/bin folder with appropriate
permissions.
I am getting this error message in my Windows OSSEC log
2009/08/18 13:16:52 ossec-agent: WARN: Unknown message received. No
action defined.
2009/08/18 13:16:52 ossec-agent: WARN: Unknown message received. No
action defined.
In the client I have
<command>
<name>atest</name>
<executable>atest.cmd</executable>
<expect>srcip</expect>
<timeout_allowed>no</timeout_allowed>
</command>
On the server I have
<command>
<name>atest</name>
<executable>atest.cmd</executable>
<expect>srcip</expect>
<timeout_allowed>no</timeout_allowed>
</command>
