Folks,
I have a test system that I just started having problems with, and the
main problem is that OSSEC is not starting.
Debugging is enabled and when I try to start it, I get:
"/var/ossec/bin/ossec-control: 69: /var/ossec/bin/ossec-control: cannot
create /var/ossec/var/start-script-lock/pid: No space left on device"
The relevant entries from the log is below
<ossec-log>
ossec-analysisd: INFO: Chrooted to directory: /var/ossec, using user:
ossec
ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not
accessible: 'Connection refused'.
ossec-rootcheck(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not
accessible: 'Connection refused'.
ossec-logcollector(1210): ERROR: Queue '/var/ossec/queue/ossec/queue'
not accessible: 'Connection refused'.
ossec-logcollector(1211): ERROR: Unable to access queue:
'/var/ossec/queue/ossec/queue'. Giving up..
ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not
accessible: 'Connection refused'.
ossec-rootcheck(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not
accessible: 'Connection refused'.
ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' not
accessible: 'Connection refused'.
ossec-rootcheck(1211): ERROR: Unable to access queue:
'/var/ossec/queue/ossec/queue'. Giving up..
ossec-syscheckd did not start correctly.
</ossec-log>
Any idea what's causing the system to not start?
TIA,
--
finid
--
---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
