Hmm... I'm not sure what to tell you. Are you able to find any more descriptive logs in dmesg or any other logs in /var/log? That's a really generic error - hard to tell where it's coming from without any other context. Try looking at the logs on the day and time that this started and see if you can find any other logs besides "error initializing: -1"
On Wed, Feb 16, 2011 at 12:36 PM, OSSEC <[email protected]> wrote: > Im using linux > > Here is what i found in /var/log/messages > > Feb 16 15:15:33 BAI-DB2 : error initializing: -1 > > tons of those lines > > > > On Feb 16, 3:20 pm, Jeremy Lee <[email protected]> wrote: > > If in Windows just open the log with Notepad, Wordpad, etc and run a > "Find" > > > > You should be able to identify the log source that this came from, as Dan > > has pointed out. > > > > Let us know. > > > > > > > > > > > > > > > > On Wed, Feb 16, 2011 at 12:12 PM, dan (ddp) <[email protected]> wrote: > > > As can be seen here: > > >http://www.ossec.net/wiki/Know_How:Email_Alerts_below_7 > > > the name of the logfile is generally in the alert ("Received From: > > > (foo) 192.168.0.2->/var/log/messages"). > > > If it isn't in your alert message, you can use grep if you're on a > > > sane(r) system. I'm not sure how to find it with Windows. > > > > > On Wed, Feb 16, 2011 at 3:06 PM, OSSEC <[email protected]> > wrote: > > > > Hey Dan, > > > > > > bai-mw1 is the name of the agent. How i can find out the log that > > > > message is hidden? > > > > > > thanks > > > > > > On Feb 16, 2:50 pm, "dan (ddp)" <[email protected]> wrote: > > > >> Hi Chris, > > > >> Find out what BAI-MW1 is. Knowing which log that message is hidden > in > > > >> might be useful. > > > >> Then write a rule for the log message. > > > > > >> On Wed, Feb 16, 2011 at 2:46 PM, OSSEC <[email protected]> > > > wrote: > > > >> > Greetings, > > > > > >> > all of the sudden i've started receiving the following error > message > > > > > >> > "Unknown problem somewhere in the system." > > > >> > Portion of the log(s): > > > > > >> > Feb 16 14:35:43 BAI-MW1 : error initializing: -1 > > > > > >> > I;ve restarted the agents and servers but i still having the same > > > >> > issue. These alerts are coming out of few agents not all of them. > > > > > >> > ANy ideas please? > > > > > >> > thanks >
