I had this problem with other host, not esxi, but it was always a permission problem. I did an install from a pre built tar file before I created the user. Nuked everything and did the install in the right order (create user/group then install tar) and it worked just fine. Hope that helps.
Tom From: [email protected] [mailto:[email protected]] On Behalf Of Hugo Deprez Sent: Friday, February 17, 2012 3:38 AM To: [email protected] Subject: [ossec-list] Ossec On Vmware ESXi Dear community, I was looking on how to monitor my esxi hosts. I am currently using version esxi 5.0. I just install ossec on it I had to modify the install script. But when I try to start Ossec agent I get : Started ossec-maild... Started ossec-execd... Started ossec-analysisd... Started ossec-logcollector... 2012/02/17 11:33:23 ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not accessible: 'Queue not found'. 2012/02/17 11:33:38 ossec-rootcheck(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not accessible: 'No such file or directory'. 2012/02/17 11:33:49 ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not accessible: 'Queue not found'. 2012/02/17 11:34:04 ossec-rootcheck(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not accessible: 'No such file or directory'. 2012/02/17 11:34:20 ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not accessible: 'Queue not found'. 2012/02/17 11:34:35 ossec-rootcheck(1211): ERROR: Unable to access queue: '/var/ossec/queue/ossec/queue'. Giving up.. Anyway, I would like to know how do you monitor esxi host with ossec ? Are you sending esxi logs to a remote syslog host and then monitoring it ? Regards, Hugo
