Are you running this as root? The ossec group exists right?
On Fri, Nov 19, 2010 at 6:50 PM, Scott Closter <[email protected]> wrote: > Hi there, I am manually trying to run the ossec-reportd process to have a > look at some of the reporting available, and I am getting the following > error: > > > > ossec-reportd(1207): ERROR: Unable to switch to group: 'ossec'. > > > > I’m running the following for my initial test: > > > > cat /var/ossec/logs/alerts/alerts.log | /var/ossec/ossec-reportd -n > “Failures summary” -f group authentication_failures > > > > The OS I’m using is Ubuntu server 10.04 LTS. > > > > Hopefully someone has come across this and fixed it, fingers crossed J > > > > Scott Closter > > > >
