Dear community, I was looking on how to monitor my esxi hosts. I am currently using version esxi 5.0.
I just install ossec on it I had to modify the install script. But when I try to start Ossec agent I get : Started ossec-maild... Started ossec-execd... Started ossec-analysisd... Started ossec-logcollector... 2012/02/17 11:33:23 ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not accessible: 'Queue not found'. 2012/02/17 11:33:38 ossec-rootcheck(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not accessible: 'No such file or directory'. 2012/02/17 11:33:49 ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not accessible: 'Queue not found'. 2012/02/17 11:34:04 ossec-rootcheck(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not accessible: 'No such file or directory'. 2012/02/17 11:34:20 ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not accessible: 'Queue not found'. 2012/02/17 11:34:35 ossec-rootcheck(1211): ERROR: Unable to access queue: '/var/ossec/queue/ossec/queue'. Giving up.. Anyway, I would like to know how do you monitor esxi host with ossec ? Are you sending esxi logs to a remote syslog host and then monitoring it ? Regards, Hugo
