On Jul 13, 2014 9:37 PM, "David Montgomery" <[email protected]> wrote: > > Hi, > > Does ossec work? I did not even edit a conf file for an agent and yet I get the below error. > > My agent and server have two way ports open > > ufw allow from #{ossec_ip} to any port 1515 > ufw allow from #{ossec_ip} to any port 1514 > /var/ossec/bin/agent-auth -m #{ossec_host} -p 1515 -A #{node.name} > /var/ossec/bin/ossec-control start > > > root@doXdevelopmentXsfXmonitorX7:/var# /var/ossec/bin/ossec-control start > Starting OSSEC HIDS v2.8 (by Trend Micro Inc.)... > ossec-execd already running... > 2014/07/13 00:34:22 ossec-config(1230): ERROR: Invalid element in the configuration: 'client'.
I still want to see this ossec.conf. Knowing the version of ossec and how you installed it might help as well. > 2014/07/13 00:34:22 ossec-config(1202): ERROR: Configuration error at '/var/ossec/etc/ossec.conf'. Exiting. > 2014/07/13 00:34:22 ossec-agentd(1215): ERROR: No client configured. Exiting. > ossec-agentd did not start > > Thanks > > > > > Below are the logs > > > 2014/07/13 00:19:59 agent-auth: INFO: Started (pid: 31329). > 2014/07/13 00:20:05 agent-auth: Could not resolve hostname: -p > > 2014/07/13 00:20:05 ossec-execd: INFO: Started (pid: 31347). > 2014/07/13 00:20:05 ossec-config(1230): ERROR: Invalid element in the configuration: 'client'. > 2014/07/13 00:20:05 ossec-config(1202): ERROR: Configuration error at '/var/ossec/etc/ossec.conf'. Exiting. > 2014/07/13 00:20:05 ossec-agentd(1215): ERROR: No client configured. Exiting. > 2014/07/13 00:32:34 agent-auth: INFO: Started (pid: 4465). > 2014/07/13 00:33:01 ossec-config(1230): ERROR: Invalid element in the configuration: 'client'. > 2014/07/13 00:33:01 ossec-config(1202): ERROR: Configuration error at '/var/ossec/etc/ossec.conf'. Exiting. > 2014/07/13 00:33:01 ossec-agentd(1215): ERROR: No client configured. Exiting. > 2014/07/13 00:34:22 ossec-config(1230): ERROR: Invalid element in the configuration: 'client'. > 2014/07/13 00:34:22 ossec-config(1202): ERROR: Configuration error at '/var/ossec/etc/ossec.conf'. Exiting. > 2014/07/13 00:34:22 ossec-agentd(1215): ERROR: No client configured. Exiting. > 2014/07/13 00:36:55 ossec-config(1230): ERROR: Invalid element in the configuration: 'client'. > 2014/07/13 00:36:55 ossec-config(1202): ERROR: Configuration error at '/var/ossec/etc/ossec.conf'. Exiting. > 2014/07/13 00:36:55 ossec-agentd(1215): ERROR: No client configured. Exiting. > 2014/07/13 00:37:20 ossec-execd(1314): INFO: Shutdown received. Deleting responses. > 2014/07/13 00:37:20 ossec-execd(1225): INFO: SIGNAL Received. Exit Cleaning... > 2014/07/13 00:37:31 ossec-execd: INFO: Started (pid: 6793). > 2014/07/13 00:37:31 ossec-config(1230): ERROR: Invalid element > > -- > > --- > You received this message because you are subscribed to the Google Groups "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
