>> still left there 2014/01/31 16:18:01 ossec-analysisd(1210): ERROR: Queue >> '/queue/alerts/ar' not accessible: 'Connection refused'. >> 2014/01/31 16:18:01 ossec-analysisd(1301): ERROR: Unable to connect to >> active response queue. Are they suppose to be waiting for some agents? Thank >> you very much for the support and kind help. >> > I'm not sure why you are getting that error. I'd make sure ossec-execd > is running on the OSSEC server, check permissions of the files in > question, and restart the processes. Maybe you don't have AR setup for > the server? > Perhaps it might be a SELinux issue? I've had issues on CentOS 6 with it. Try check /var/log/audit/audit.log if it's in enforcing mode. A quick way to test is "setenforce 0" and try again, if it works then SELinux isn't configured right.
Cheers, Artien
smime.p7s
Description: S/MIME Cryptographic Signature
