Hi,
Does ossec work? I did not even edit a conf file for an agent and yet I
get the below error.
My agent and server have two way ports open
ufw allow from #{ossec_ip} to any port 1515
ufw allow from #{ossec_ip} to any port 1514
/var/ossec/bin/agent-auth -m #{ossec_host} -p 1515 -A #{node.name}
/var/ossec/bin/ossec-control start
root@doXdevelopmentXsfXmonitorX7:/var# /var/ossec/bin/ossec-control start
Starting OSSEC HIDS v2.8 (by Trend Micro Inc.)...
ossec-execd already running...
2014/07/13 00:34:22 ossec-config(1230): ERROR: Invalid element in the
configuration: 'client'.
2014/07/13 00:34:22 ossec-config(1202): ERROR: Configuration error at
'/var/ossec/etc/ossec.conf'. Exiting.
2014/07/13 00:34:22 ossec-agentd(1215): ERROR: No client configured.
Exiting.
ossec-agentd did not start
Thanks
Below are the logs
2014/07/13 00:19:59 agent-auth: INFO: Started (pid: 31329).
2014/07/13 00:20:05 agent-auth: Could not resolve hostname: -p
2014/07/13 00:20:05 ossec-execd: INFO: Started (pid: 31347).
2014/07/13 00:20:05 ossec-config(1230): ERROR: Invalid element in the
configuration: 'client'.
2014/07/13 00:20:05 ossec-config(1202): ERROR: Configuration error at
'/var/ossec/etc/ossec.conf'. Exiting.
2014/07/13 00:20:05 ossec-agentd(1215): ERROR: No client configured.
Exiting.
2014/07/13 00:32:34 agent-auth: INFO: Started (pid: 4465).
2014/07/13 00:33:01 ossec-config(1230): ERROR: Invalid element in the
configuration: 'client'.
2014/07/13 00:33:01 ossec-config(1202): ERROR: Configuration error at
'/var/ossec/etc/ossec.conf'. Exiting.
2014/07/13 00:33:01 ossec-agentd(1215): ERROR: No client configured.
Exiting.
2014/07/13 00:34:22 ossec-config(1230): ERROR: Invalid element in the
configuration: 'client'.
2014/07/13 00:34:22 ossec-config(1202): ERROR: Configuration error at
'/var/ossec/etc/ossec.conf'. Exiting.
2014/07/13 00:34:22 ossec-agentd(1215): ERROR: No client configured.
Exiting.
2014/07/13 00:36:55 ossec-config(1230): ERROR: Invalid element in the
configuration: 'client'.
2014/07/13 00:36:55 ossec-config(1202): ERROR: Configuration error at
'/var/ossec/etc/ossec.conf'. Exiting.
2014/07/13 00:36:55 ossec-agentd(1215): ERROR: No client configured.
Exiting.
2014/07/13 00:37:20 ossec-execd(1314): INFO: Shutdown received. Deleting
responses.
2014/07/13 00:37:20 ossec-execd(1225): INFO: SIGNAL Received. Exit
Cleaning...
2014/07/13 00:37:31 ossec-execd: INFO: Started (pid: 6793).
2014/07/13 00:37:31 ossec-config(1230): ERROR: Invalid element
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
