Hi, I just installed OSSEC 2.5 and configured couple of remote hosts. But, when I use the WebUI->Integrity Checking->Dump database for a remote hosts, nothing is displayed. It does work fine when I choose the server itself.
I have checked the databases under /var/ossec/queue/syscheck and the databases do exists for my remote hosts and they do contain all the checksum etc... My server is running on RHEL 5.2 2.6.18-92.el5 and the remote hosts are both running Gentoo 2.6.28-gentoo-r5. Here is the output of “ls –ltr /var/ossec/queue/syscheck/: -rw-r--r-- 1 ossec ossec 258945 Feb 3 11:26 (myhost1.mydomain.com) 10.10.10.184->syscheck -rwxr----- 1 ossec ossec 348618 Feb 3 11:29 syscheck -rw-r--r-- 1 ossec ossec 10394583 Feb 3 13:55 (myhost2.mydomain.com) 10.10.10.192->syscheck P.S. My remote hostnames and IP addresses above have been renamed for security reasons. --Mehregan
