Can you please paste the relevant line from /var/ossec/bin/list_agents -a If the agent shows as disconnected in the list agents view (please paste line) Please check the log files showing the connections from the agent back to the server Also - please run manage_agents, copy out the key for this agent and check the key from the server against the one installed on the client. If these match - please stop the agent rotate your log and restart the agent and paste back the log file from the agent (please remember to obfuscate or replace agent and server IP addresses in such a way we can still tell what is what (ie 192.168.0.123 (agent) replace with <agent ip>)
Thank you, Frank On Oct 7, 12:35 am, Gags <[email protected]> wrote: > Hi > > I want to update the issue > > 1) Agent is shoing disconnected in the WUI ( Sorry I termed it > mistaken) > 2) It is showing disconnected through agent_control tool > 3) Logs are arriving from the said disconnected agent > 4) I have restarted the ossec services and webservices yet no effect > 5) There is no error corresponding to this in both server and agent > > Can any one encountered it before logs are coming yet status is > disconnected > > Thanks & Regards > Gags
