setenforce 0 selinux strikes again...
:/ doh.... regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 ________________________________________ From: [email protected] [[email protected]] on behalf of Steven Jones [[email protected]] Sent: Thursday, 17 November 2011 12:58 p.m. To: [email protected] Subject: [ossec-list] Im missing something Hi All, I have tried to set this up....but there seems to be nothing concise/usable on how to use the OSSEC application, ie a user manual. is there such a thing? So in the web ui I only have the local agent, which I am not able to retrieve any info on....it says "unable to retrieve alerts" I'm missing agent 001 on my remote server in the web ui. How do I get this to come up in the web ui and retrieve alerts? I can run agent_control -i 001 from the command line and the reply seems to say it can see the remote agent... How can I test its actually doing anything? I created /ossec-test and touched test1 as zero length, then inserted random characters but no feedback....presumably it should email the file has changed? regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272
