I'm having a similar issue, the clients are connecting, and disconnecting regularly. I'm only being emailed about the disconnects, never reconnects or hash changes except for new host's I've added after I spotted the issue. They are however reporting their logs to the server in the : /var/ossec/logs/alerts/2010/Jan/ directory, but I'm not emailed about the events in the log files there. My issues *seem* to have begun as the new year began, 1/1/2010 00:00. Perhaps you can grep through your server logs and see if anything funky happened. I'm still waiting on the list for any suggestions to fix the issue or troubleshooting suggestions.
- [ossec-list] Server doesnt see the clients anymore Thomas Stather
- Re: [ossec-list] Server doesnt see the clients anymo... Rich Rumble
- RE: [ossec-list] Server doesnt see the clients anymo... Carter, Dennis A
- [ossec-list] Re: Server doesnt see the clients a... Thomas Stather
- Re: [ossec-list] Server doesnt see the clients anymo... dan (ddp)
- Re: [ossec-list] Server doesnt see the clients a... Rich Rumble
- Re: [ossec-list] Server doesnt see the clien... dan (ddp)
- [ossec-list] Re: Server doesnt see the clien... Thomas Stather
- Re: [ossec-list] Re: Server doesnt see t... Rich Rumble
- Re: [ossec-list] Re: Server doesnt see t... dan (ddp)
- Re: [ossec-list] Re: Server doesnt see t... Daniel Cid
- [ossec-list] Re: Server doesnt see ... Thomas Stather
