On 2014-09-19 8:13, Abhi wrote:

After starting OSSEC on the new server, around 22 agents started
reporting correctly but that was only till an hour. After that, most
of the agents dropped off, leaving the active count to only 4.

This might be an issue with the rids. Try deleting the files in ossec/queue/rids/ and restarting. The logs should give you a clue.

--

--- You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to