> when i rotate the file access.log with logrotate, ossec agent stop sending logs to ossec server.
You meant the OSSEC agent stopped sending squid access.log to the server, right? How about other logs? Did the agent keep sending other logs to the server? On Monday, July 23, 2012 2:47:30 PM UTC-7, Emmanuel E. wrote: > > Hello group! I have a problem with squid logs. Happens when i rotate the > file access.log with logrotate, ossec agent stop sending logs to ossec > server. This sometimes happens but other times when I rotate the file, the > logs are still coming to the server. I am using both the server and the > agent OSSEC HIDS 2.6. Apparently the agent loses its position in the > access.log file and stops sending logs. Anyone know how to fix this? > Thanks for advance. >
