This could be a duplicate rids issue. Did you rm -rf /var/ossec and re-install?
Check this thread to see if helps:
http://marc.info/?l=ossec-list&m=124627481319160&w=2

On Tue, Nov 23, 2010 at 6:29 PM,  <[email protected]> wrote:
> Does the agent key need to be regenerated after machine is upgraded? I'm
> getting this error trying to reinstall key and reconnect to management
> server.  Thank You Christian...
>
>
> 2010/11/23 18:22:05 ossec-remoted(1407): ERROR: Duplicated counter for
> 'ETVM_778'.
> 2010/11/23 18:22:10 ossec-remoted: WARN: Duplicate error:  global: 0, local:
> 99, saved global: 1, saved local:850
> 2010/11/23 18:22:10 ossec-remoted(1407): ERROR: Duplicated counter for
> 'ETVM_778'.
> 2010/11/23 18:22:16 ossec-remoted: WARN: Duplicate error:  global: 0, local:
> 100, saved global: 1, saved local:850
> 2010/11/23 18:22:16 ossec-remoted(1407): ERROR: Duplicated counter for
> 'ETVM_778'.
> 2010/11/23 18:22:20 ossec-remoted: WARN: Duplicate error:  global: 0, local:
> 86, saved global: 1, saved local:3174
> 2010/11/23 18:22:20 ossec-remoted(1407): ERROR: Duplicated counter for
> 'ETVM_754'.
> 2010/11/23 18:22:26 ossec-remoted: WARN: Duplicate error:  global: 0, local:
> 87, saved global: 1, saved local:3174
> 2010/11/23 18:22:26 ossec-remoted(1407): ERROR: Duplicated counter for
> 'ETVM_754'.
> 2010/11/23 18:22:30 ossec-remoted: WARN: Duplicate error:  global: 0, local:
> 88, saved global: 1, saved local:3174
> 2010/11/23 18:22:30 ossec-remoted(1407): ERROR: Duplicated counter for
> 'ETVM_754'.
> 2010/11/23 18:22:35 ossec-remoted: WARN: Duplicate error:  global: 0, local:
> 89, saved global: 1, saved local:3174
> 2010/11/23 18:22:35 ossec-remoted(1407): ERROR: Duplicated counter for
> 'ETVM_754'.
> 2010/11/23 18:22:41 ossec-remoted: WARN: Duplicate error:  global: 0, local:
> 90, saved global: 1, saved local:3174
> 2010/11/23 18:22:41 ossec-remoted(1407): ERROR: Duplicated counter for
> 'ETVM_754'.
> 2010/11/23 18:23:02 ossec-remoted: WARN: Duplicate error:  global: 0, local:
> 101, saved global: 1, saved local:674

Reply via email to