Thanks for that... I had no allowed-ips, wasn't real clear in the doco that it was needed.
On Thursday, October 3, 2013 4:21:29 PM UTC+10, Jeff Allison wrote: > > I've installed ossec 2.7 on a centos 6.4 machine and I'm unable to receive > syslog messages via ossec-remoted. > > my ossec.conf contains, > > <remote> > <connection>syslog</connection> > </remote> > > <remote> > <connection>secure</connection> > </remote> > > But I cannot see the remoted service listening on udp 514 > > [root@maitprodsplunk bin]# fuser -v -n udp 514 > > [root@maitprodsplunk bin]# fuser -v -n udp 1514 > USER PID ACCESS COMMAND > 1514/udp: ossecr 501 F.... ossec-remoted > > Any ideas??? > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
