ossec version:2.5.1 ossec wui version:0.3 All agents show up on the ossec-wui web page. I can get stats from any time reference since ossec has been installed and running. When I try to search any day other than the current day or Jan 30th it comes back with "Nothing Returned". I am unsure of why Jan 30th is "stuck" in the search queue. All permissions in ossec home are correct. Permissions in ossec-wui are as follows:
-rw-r--r-- 1 ossec ossec 262 Oct 5 2010 .htaccess -rw-r--r-- 1 ossec ossec 20 Oct 5 2010 .htpasswd -rwxr-xr-x 1 ossec ossec 278 Feb 27 2008 CONTRIB -rw-r--r-- 1 ossec ossec 35745 Mar 3 2008 LICENSE -rw-r--r-- 1 ossec ossec 1157 Feb 27 2008 README -rw-r--r-- 1 ossec ossec 923 Feb 27 2008 README.search drwxr-xr-x 3 ossec ossec 4096 Mar 4 2008 css -rw-r--r-- 1 ossec ossec 218 Feb 29 2008 htaccess_def.txt drwxr-xr-x 2 ossec ossec 4096 Mar 4 2008 img -rwxr-xr-x 1 ossec ossec 5225 Feb 27 2008 index.php drwxr-xr-x 2 ossec ossec 4096 Mar 4 2008 js drwxr-xr-x 3 ossec ossec 4096 Aug 8 14:40 lib -rw-r--r-- 1 ossec ossec 462 Oct 22 2010 ossec_conf.php -rw-r--r-- 1 ossec ossec 462 Oct 22 2010 ossec_conf_orig.php -rwxr-xr-x 1 ossec ossec 1824 Feb 29 2008 setup.sh drwxr-xr-x 2 ossec ossec 4096 Aug 8 09:07 site drwxrwxrwx 2 ossec ossec 200704 Aug 9 08:51 tmp I have tried chgrp to www for tmp and restarting apache, but it still comes up with the same errors. I have watching the ossec.log, log/ messages, and apache/error_log. The only feedback I get is the following from the apache/error_log when I try to search anything other than the current day or Jan30th included in the search period. [Tue Aug 09 08:51:11 2011] [error] [client *IPADDRESS*] PHP Notice: Undefined offset: 0 in */www/htdocs/ossec-wui/lib/Ossec/AlertList.php on line 89, referer: http://ossec/ossec-wui/index.php?f=s [Tue Aug 09 08:51:11 2011] [error] [client *IPADDRESS*] PHP Notice: Trying to get property of non-object in */www/htdocs/ossec-wui/lib/ Ossec/AlertList.php on line 105, referer: http://ossec/ossec-wui/index.php?f=s [Tue Aug 09 08:51:11 2011] [error] [client *IPADDRESS*] PHP Notice: Trying to get property of non-object in */www/htdocs/ossec-wui/lib/ Ossec/AlertList.php on line 107, referer: http://ossec/ossec-wui/index.php?f=s I have seen that other people have had the same issue on here, but there has not been a solution to the issue. Any help is appreciated and thank you in advance.
