On Mon, Mar 3, 2014 at 5:34 PM, moe hans <[email protected]> wrote: > Yes , it did get update in the syscheck database. I can see all the changes > at command line only WUI is a issue. >
Ok, so that narrows it down. Check the permissions/owner/group of the syscheck database files of the agents that are having this issue. Check your webserver logs for error messages. > On Thursday, February 27, 2014 1:37:40 PM UTC-8, moe hans wrote: >> >> We recently installed OSSEC server and monitoring 5 window 2008 server >> for reg modification and registry modification. It works fine for 3 servers >> but for two of them it is only showing registry modification but no file >> modifications in integrity check ---> dump database. Although we do get >> email alerts when a file get modified on that server. I check the >> configuration on all the servers is same. Any idea but it could be. Al > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
