Just trying to get MySQL working, did the tutorial here: http://www.ossec.net/doc/manual/output/mysql-database-output.html
Worked out that even with a MySQL enabled ossec, with database set to work, and with the schema in... no data (signatures for example) were going in on 'ossec restart'. Eventually found out: /var/ossec/bin/ossec-control enable database Any chance of having the mentioned manual updated to reflect this line please (for when I forget next time) (Apologies if this is out no longer accessible or If I've misread instructions.. that does happen a lot :s)
