Has nothing to do with splunk or not -- and my guess is this is not ossec 2.7? You can check if you have a tool like netcat (default installed on Linux) by doing "nc -u server-address 1514"
then type a few lines to see if on the server you are seeing errors in the log file (incorrectly formatted" or "not allowed" messages. However, most of the connection related problems were resolved in 2.7. make sure you are on the newest. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
