* Up <[email protected]> [2014-06-04 09:21:22 -0700]:
Hello guys,
I just tried upgrade of ossec on my linux system(local) from
VERSION="v2.7.1"TYPE="local" to latest Latest Stable Release
(2.8)server/agent. But it seems there is no local type in it?
After running ./install.sh (I chose yes to both questions), my TYPE="local"
got converted to TYPE="server" and ossec.log throws following message:
I will check into the this. Give me a few.
2014/06/04 11:06:28 ossec-execd(1225): INFO: SIGNAL Received. Exit
Cleaning...
2014/06/04 11:06:30 ossec-testrule: INFO: Reading local decoder file.
2014/06/04 11:06:30 ossec-analysisd: Invalid decoder name: 'bro-ids'.
2014/06/04 11:06:30 ossec-testrule(1220): ERROR: Error loading the rules:
'bro-ids_rules.xml'.
2014/06/04 11:10:03 ossec-testrule: INFO: Reading local decoder file.
2014/06/04 11:10:03 ossec-analysisd: Invalid decoder name: 'bro-ids'.
2014/06/04 11:10:03 ossec-testrule(1220): ERROR: Error loading the rules:
'bro-ids_rules.xml'.
There is a 'bro-ids_rules.xml' in /var/ossec/rules
You have two choices:
touch /var/ossec/rules/bro-ids_rules.xml
or edit /var/ossec/conf/ossec.conf and remove the xml line with
bro-ids_rules.xml
Please help!
Thank you
Upen
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
--
---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
