thank you reply,i will read that.
thanks&Best Regards
From: dan (ddp)
Date: 2013-01-30 21:51
To: ossec-list
Subject: Re: [ossec-list] splunk+ossec ossec-agent Disconnected?
On Wed, Jan 30, 2013 at 6:13 AM, <[email protected]> wrote:
>
> hi,all
>
> my ossec now integration to splunk,but some ossec-agent can not
> connect,like this
>
>
> 2013/01/30 18:40:51 ossec-agentd(4101): WARN: Waiting for server reply
> (not started). Tried: '192.168.x.x'.
>
> 2013/01/30 18:55:17 ossec-agentd: INFO: Trying to connect to server
> (192.168.x.x:1514).
>
> 2013/01/30 18:55:17 ossec-agentd: INFO: Using IPv4 for: 192.168.x.x .
>
> 2013/01/30 18:55:38 ossec-agentd(4101): WARN: Waiting for server reply
> (not started). Tried: '192.168.x.x'.
>
>
> 1514 port is open and no firewall in the there.i use google search some
> cause,but all not is.so,any one now how i can do that?
>
Have these agents ever successfully connected? Are there any relevant
logs in /var/ossec/logs/ossec.log (on the agents that are not
connecting and the server)? Is the traffic from these agents making it
to the server? Do they look like they are coming from the correct IP?
Are the IPs from the not working agents unique in client.keys?
I guess I should really write a FAQ on this issue... Maybe something
like
http://www.ossec.net/doc/faq/unexpected.html#the-communication-between-my-agent-and-the-server-is-not-working-what-to-do
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/groups/opt_out.
>
>
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
