Here is in another server Feb 16 15:31:43 BAI-MW1 dhclient: bound to 169.254.95.120 -- renewal in 301 seconds. Feb 16 15:35:43 BAI-MW1 : error initializing: -1 Feb 16 15:36:44 BAI-MW1 dhclient: DHCPREQUEST on usb0 to 169.254.95.118 port 67 Feb 16 15:36:44 BAI-MW1 dhclient: DHCPACK from 169.254.95.118
These servers are used for weblogic On the other two servers the date is wrong ... will fix that soon, but im not sure if that was causing the issue. (these are test servers) On Feb 16, 3:58 pm, "dan (ddp)" <[email protected]> wrote: > Look at the proceeding lines, maybe there is a clue there. What's the > purpose of this system? > > > > > > > > On Wed, Feb 16, 2011 at 3:36 PM, OSSEC <[email protected]> wrote: > > Im using linux > > > Here is what i found in /var/log/messages > > > Feb 16 15:15:33 BAI-DB2 : error initializing: -1 > > > tons of those lines > > > On Feb 16, 3:20 pm, Jeremy Lee <[email protected]> wrote: > >> If in Windows just open the log with Notepad, Wordpad, etc and run a "Find" > > >> You should be able to identify the log source that this came from, as Dan > >> has pointed out. > > >> Let us know. > > >> On Wed, Feb 16, 2011 at 12:12 PM, dan (ddp) <[email protected]> wrote: > >> > As can be seen here: > >> >http://www.ossec.net/wiki/Know_How:Email_Alerts_below_7 > >> > the name of the logfile is generally in the alert ("Received From: > >> > (foo) 192.168.0.2->/var/log/messages"). > >> > If it isn't in your alert message, you can use grep if you're on a > >> > sane(r) system. I'm not sure how to find it with Windows. > > >> > On Wed, Feb 16, 2011 at 3:06 PM, OSSEC <[email protected]> wrote: > >> > > Hey Dan, > > >> > > bai-mw1 is the name of the agent. How i can find out the log that > >> > > message is hidden? > > >> > > thanks > > >> > > On Feb 16, 2:50 pm, "dan (ddp)" <[email protected]> wrote: > >> > >> Hi Chris, > >> > >> Find out what BAI-MW1 is. Knowing which log that message is hidden in > >> > >> might be useful. > >> > >> Then write a rule for the log message. > > >> > >> On Wed, Feb 16, 2011 at 2:46 PM, OSSEC <[email protected]> > >> > wrote: > >> > >> > Greetings, > > >> > >> > all of the sudden i've started receiving the following error message > > >> > >> > "Unknown problem somewhere in the system." > >> > >> > Portion of the log(s): > > >> > >> > Feb 16 14:35:43 BAI-MW1 : error initializing: -1 > > >> > >> > I;ve restarted the agents and servers but i still having the same > >> > >> > issue. These alerts are coming out of few agents not all of them. > > >> > >> > ANy ideas please? > > >> > >> > thanks
