On 2014-06-09 10:01, Dan Kennedy wrote:
Thanks for the reply. I know that the console is running 2.7 & I
believe the agents are 2.8 as I upgraded them shortly after I put the
2.7 ones onto the systems. I'll revert those agents to 2.7 & test a
bit, then report back. Thanks kindly!
Dan's right. The manager should generally always be the most recent
version while the agents can be upgraded after. But in this case, it's
necessary. The decoder on the 2.7 manager does not understand the newly
formatted logs. If you can't upgrade the manager right now, you can swap
out the Windows decoder and that will likely fix your problem.
--
---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
