You said the permissions are correct, but double check. Can the wui handle compressed log files? If not, you may have gunzip the older log files.
On Tue, Aug 9, 2011 at 10:05 AM, wendt <[email protected]> wrote: > ossec version:2.5.1 > ossec wui version:0.3 > > All agents show up on the ossec-wui web page. I can get stats from > any time reference since ossec has been installed and running. When I > try to search any day other than the current day or Jan 30th it comes > back with "Nothing Returned". I am unsure of why Jan 30th is "stuck" > in the search queue. All permissions in ossec home are correct. > Permissions in ossec-wui are as follows: > > -rw-r--r-- 1 ossec ossec 262 Oct 5 2010 .htaccess > -rw-r--r-- 1 ossec ossec 20 Oct 5 2010 .htpasswd > -rwxr-xr-x 1 ossec ossec 278 Feb 27 2008 CONTRIB > -rw-r--r-- 1 ossec ossec 35745 Mar 3 2008 LICENSE > -rw-r--r-- 1 ossec ossec 1157 Feb 27 2008 README > -rw-r--r-- 1 ossec ossec 923 Feb 27 2008 README.search > drwxr-xr-x 3 ossec ossec 4096 Mar 4 2008 css > -rw-r--r-- 1 ossec ossec 218 Feb 29 2008 htaccess_def.txt > drwxr-xr-x 2 ossec ossec 4096 Mar 4 2008 img > -rwxr-xr-x 1 ossec ossec 5225 Feb 27 2008 index.php > drwxr-xr-x 2 ossec ossec 4096 Mar 4 2008 js > drwxr-xr-x 3 ossec ossec 4096 Aug 8 14:40 lib > -rw-r--r-- 1 ossec ossec 462 Oct 22 2010 ossec_conf.php > -rw-r--r-- 1 ossec ossec 462 Oct 22 2010 ossec_conf_orig.php > -rwxr-xr-x 1 ossec ossec 1824 Feb 29 2008 setup.sh > drwxr-xr-x 2 ossec ossec 4096 Aug 8 09:07 site > drwxrwxrwx 2 ossec ossec 200704 Aug 9 08:51 tmp > > I have tried chgrp to www for tmp and restarting apache, but it still > comes up with the same errors. I have watching the ossec.log, log/ > messages, and apache/error_log. The only feedback I get is the > following from the apache/error_log when I try to search anything > other than the current day or Jan30th included in the search period. > > [Tue Aug 09 08:51:11 2011] [error] [client *IPADDRESS*] PHP Notice: > Undefined offset: 0 in */www/htdocs/ossec-wui/lib/Ossec/AlertList.php > on line 89, referer: http://ossec/ossec-wui/index.php?f=s > [Tue Aug 09 08:51:11 2011] [error] [client *IPADDRESS*] PHP Notice: > Trying to get property of non-object in */www/htdocs/ossec-wui/lib/ > Ossec/AlertList.php on line 105, referer: http://ossec/ossec-wui/index.php?f=s > [Tue Aug 09 08:51:11 2011] [error] [client *IPADDRESS*] PHP Notice: > Trying to get property of non-object in */www/htdocs/ossec-wui/lib/ > Ossec/AlertList.php on line 107, referer: http://ossec/ossec-wui/index.php?f=s > > > I have seen that other people have had the same issue on here, but > there has not been a solution to the issue. Any help is appreciated > and thank you in advance. >
