Hey Guys, we are implementing an OSSEC Installation in our Environment due the the great functionality of the System.
We got Agents on both Linux and Windows and the Log Shippment is working fine. But as we tested what happen if the OSSEC Server goes down (i. e. for maintenance) the Windows-Logs which are produced in the downtime doesnt get shipped to the OSSEC Server after he is online again. Regarded to this post: https://groups.google.com/forum/#!topic/ossec-list/F_izIq3zEi4 from the yeah 2010 the developer doesnt seem intereseted in impelmenting such an feature. Unfortunate our Environment is very critical and if Logs get lost this would be an unacceptable <http://dict.leo.org/#/search=unacceptable&searchLoc=0&resultOrder=basic&multiwordShowSingle=on> behavior for us. Hopefully you can provide us with some good news :) -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
