On Wed, Oct 27, 2010 at 7:34 AM, Mike Sievers <[email protected]> wrote: > yes, active response is enabled > the process is still running > > ??? >
Is there anything else in the log? Are ALL of the ossec processes running? Try running agentd in debug mode. > 2010/10/26 dan (ddp) <[email protected]> >> >> On Tue, Oct 26, 2010 at 9:15 AM, Mike Sievers >> <[email protected]> wrote: >> > Hi, >> > >> > the ossec.log said: >> > ossec-agentd(1210): ERROR: Queue '/queue/alerts/execq' not accessible: >> > 'Queue not found'. >> > >> > After a reboot of the machine. The folder is empty: >> > >> > ls -a >> > /var/ossec/queue/alerts >> > (nofile) >> > >> > ??? >> > >> > Mike >> > >> >> Do you have active response enabled? >> Are the ossec processes still running? > >
