On Mon, Mar 17, 2014 at 3:04 AM, Nam Nguyen <[email protected]> wrote: > My OSSEC server is full without my notice. And ossec server disconnects from > all agents. > > I move the archive.log file to another partition and restart ossec server. > But it still has the error > > 2014/03/17 13:54:22 ossec-analysisd: ERROR: read error on > /queue/diff/Security/535/last-entry >
Does it run even with this error? Check permissions. You should be able to safely delete the directory if necessary. > Plz help > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
