On 07/25/2012 15:01, ant's wrote:
I'm very new to ossec. I installed both server and agent.
Where? On the same host? If you want to monitor a single host, you want to do a 'local' install. If you have more than one host and want to be able to manage all of them from one computer, you install 'server' on the main computer and 'agent' on the others.
You probably want a single host, so delete it, do a 'local' install and start from there.
