On Wed, May 23, 2012 at 8:08 AM, Emmanuel E. <[email protected]> wrote: > Hello, I have a problem with the database of OSSEC, ossec-dbd, because the > same stops unexpectedly, while that the mysql is working properly. When I > restart ossec, this service start correctly. > Keeping track of the states through which it passes ossec, fail to see the > following: > > first: > ossec: output: 'comando_status': > ossec-monitord is running ... > ossec-logcollector is running ... > ossec-remoted is running ... > ossec-syscheckd is running ... > ossec-analysisd is running ... > ossec-MAILD is running ... > ossec-execd is running ... > ossec-dbd is running ... > > second: > ossec: output: 'comando_status': > ossec-monitord is running ... > ossec-logcollector is running ... > ossec-remoted is running ... > ossec-syscheckd is running ... > ossec-analysisd is running ... > ossec-MAILD is running ... > ossec-execd is running ... > ossec-dbd: Process 19401 Not Used by ossec, Removing .. > ossec-dbd not running ... > > third: > ossec: output: 'comando_status': > ossec-monitord is running ... > ossec-logcollector is running ... > ossec-remoted is running ... > ossec-syscheckd is running ... > ossec-analysisd is running ... > ossec-MAILD is running ... > ossec-execd is running ... > ossec-dbd not running ... > > Anyone know why this happens? > Thanks in advance.
Which version of OSSEC? What are you running it on? Anything about ossec-dbd in /var/ossec/logs/ossec.log? Try running ossec-dbd in debug mode and check the log again.
