Hi list,
I have a strange error. When I restart ossec I got the following output:
Killing ossec-monitord ..
Killing ossec-logcollector ..
Killing ossec-remoted ..
Killing ossec-syscheckd ..
Killing ossec-analysisd ..
Killing ossec-maild ..
Killing ossec-execd ..
OSSEC HIDS v2.6 Stopped
Starting OSSEC HIDS v2.6 (by Trend Micro Inc.)...
OSSEC analysisd: Testing rules failed. Configuration error. Exiting.
Started ossec-maild...
Started ossec-execd...
Started ossec-analysisd...
Started ossec-logcollector...
Started ossec-remoted...
Started ossec-syscheckd...
Started ossec-monitord...
Completed.
In the ossec.log I didn't find any error for today. I commented out the
local_rules.xml in ossec.conf but I got still the same message.
ossec_logtest doesn't report any error with the rules.
Has anyone an idea?
Thanks
sqall
--
Andre Pawlowski
-------------------------------------------------------------------
Es ist nicht genug, zu wissen, man muss auch anwenden;
es ist nicht genug, zu wollen, man muss auch tun.
-Johann Wolfgang von Goethe
