no,nothing error,/ossec/bin/ossec-reportd -t test ok! On Thursday, November 13, 2014 5:13:19 PM UTC+8, [email protected] wrote: > > hi,all > > my ossec.conf like this > > > <reports> > <level>8</level> > <title>Soc Daily Report</title> > <showlogs>yes</showlogs> > <email_to>[email protected]</email_to> > </reports> > > > > and ossec.log > > > 2014/11/10 15:00:55 ossec-testrule: INFO: Reading local decoder file. > 2014/11/10 15:00:55 ossec-testrule: INFO: Started (pid: 8747). > 2014/11/11 00:00:38 ossec-monitord: INFO: Starting daily reporting for 'Soc > Daily Report' > 2014/11/11 11:01:43 rootcheck: INFO: Starting rootcheck scan. > 2014/11/11 11:17:58 rootcheck: INFO: Ending rootcheck scan. > 2014/11/11 12:42:58 ossec-syscheckd: INFO: Starting syscheck scan. > 2014/11/11 12:50:25 ossec-syscheckd: INFO: Ending syscheck scan. > > > > see ossec-monitord starting,but no email send me.. > > i see ossec/logs/ some .report... file and nothing in file.. > > > so how can i do? >
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
