Yes and I did find out it was a typo in one of my rules, Thank you for your response.
>>> Adi CHIRU <[email protected]> 5/20/2010 3:39 AM >>> I assume that you also have another line just below this one in your logs: 2010/05/19 17:26:21 ossec-agentd(1210): ERROR: Queue '/queue/alerts/execq' not accessible: 'Queue not found'. 2010/05/19 17:26:36 ossec-agentd: INFO: Unable to connect to the active response queue (disabled). As far as I now, this is because you have the active response feature disabled. Adi From:[email protected] [mailto:[email protected]] On Behalf Of [email protected] Sent: Wednesday, May 19, 2010 8:17 PM To: [email protected] Subject: [ossec-list] Anyone give me a reason this error just popped up Thank You 2010/05/19 13:15:27 ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not accessible: 'Connection refused'.
