Ok, so it seem that there is some progress (in our analysis). Can you paste the full contents of the ossec.log file on agent (since the last restart).
On Fri, Jul 8, 2011 at 12:24 PM, blacklight <[email protected]> wrote: > It appears at this point that OSSEC is not publishing any alert > nothing from mailbox.log is being published. Since all OSSEC daemons > on the OSSEC server host are 100% operational > >
