On Fri, Feb 17, 2012 at 6:37 AM, Hugo Deprez <[email protected]> wrote: > Dear community, > > I was looking on how to monitor my esxi hosts. > I am currently using version esxi 5.0. > > I just install ossec on it I had to modify the install script.
What changes did you make? > But when I try to start Ossec agent I get : > > Started ossec-maild... > Started ossec-execd... > Started ossec-analysisd... > Started ossec-logcollector... > 2012/02/17 11:33:23 ossec-syscheckd(1210): ERROR: Queue > '/var/ossec/queue/ossec/queue' not accessible: 'Queue not found'. > 2012/02/17 11:33:38 ossec-rootcheck(1210): ERROR: Queue > '/var/ossec/queue/ossec/queue' not accessible: 'No such file or directory'. > 2012/02/17 11:33:49 ossec-syscheckd(1210): ERROR: Queue > '/var/ossec/queue/ossec/queue' not accessible: 'Queue not found'. > 2012/02/17 11:34:04 ossec-rootcheck(1210): ERROR: Queue > '/var/ossec/queue/ossec/queue' not accessible: 'No such file or directory'. > 2012/02/17 11:34:20 ossec-syscheckd(1210): ERROR: Queue > '/var/ossec/queue/ossec/queue' not accessible: 'Queue not found'. > 2012/02/17 11:34:35 ossec-rootcheck(1211): ERROR: Unable to access queue: > '/var/ossec/queue/ossec/queue'. Giving up.. > Did you look at /var/ossec/logs/ossec.log? That will generally provide more information. > > Anyway, I would like to know how do you monitor esxi host with ossec ? > Are you sending esxi logs to a remote syslog host and then monitoring it ? > > > Regards, > > Hugo
