I'm running into issues installing the OSSEC 2.5.1 client on a windows 2008 R2 server. After repeated un-installation and reinstallation I am unable to start the OSSEC client from the OSSEC Agent Manager, receiving an "Unable to start OSSEC (check config)." Error code.
My initial installation worked correctly, and I changed the OSSEC config file to monitor log files in a specific directory. I mistyped the entry which, in turn, caused the error mentioned above. After correcting the config file I still received this error message when starting the agent process. So, I decided to uninstall and re-install. I then uninstalled, deleted the parent directory, and re-installed a number of times. I've deleted and re-created the agent in the server a number of times, and I am still receiving the error message every time I attempt to start the process from the OSSEC Agent Manager. Now here's where things get odd. I found the OSSEC Hids process to be running on the server. However, the Agent Manager lists it as "Stopped". The server shows the agent as "active" as well. Any help with this issue is very much appreciated. Thank you! Tyler Ross
