I thought that was the issue too, but I have 3.1 GB of free disk space.
--
finid
On 2014-11-30 09:33, dan (ddp) wrote:
On Nov 30, 2014 10:11 AM, <[email protected]> wrote:
>
> Folks,
>
> I have a test system that I just started having problems with, and
the main problem is that OSSEC is not starting.
>
> Debugging is enabled and when I try to start it, I get:
>
> "/var/ossec/bin/ossec-control: 69: /var/ossec/bin/ossec-control:
cannot create /var/ossec/var/start-script-lock/pid: No space left on
device"
>
Perhaps the full disk is an issue?
> The relevant entries from the log is below
>
> <ossec-log>
>
> ossec-analysisd: INFO: Chrooted to directory: /var/ossec, using
user: ossec
> ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue'
not accessible: 'Connection refused'.
> ossec-rootcheck(1210): ERROR: Queue '/var/ossec/queue/ossec/queue'
not accessible: 'Connection refused'.
> ossec-logcollector(1210): ERROR: Queue
'/var/ossec/queue/ossec/queue' not accessible: 'Connection refused'.
> ossec-logcollector(1211): ERROR: Unable to access queue:
'/var/ossec/queue/ossec/queue'. Giving up..
> ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue'
not accessible: 'Connection refused'.
> ossec-rootcheck(1210): ERROR: Queue '/var/ossec/queue/ossec/queue'
not accessible: 'Connection refused'.
> ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue'
not accessible: 'Connection refused'.
> ossec-rootcheck(1211): ERROR: Unable to access queue:
'/var/ossec/queue/ossec/queue'. Giving up..
>
> ossec-syscheckd did not start correctly.
>
> </ossec-log>
>
> Any idea what's causing the system to not start?
>
> TIA,
>
>
> --
> finid
>
> --
>
> --- You received this message because you are subscribed to the
Google Groups "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it,
send an email to [email protected].
> For more options, visit https://groups.google.com/d/optout [1].
--
---
You received this message because you are subscribed to the Google
Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it,
send an email to [email protected].
For more options, visit https://groups.google.com/d/optout [1].
Links:
------
[1] https://groups.google.com/d/optout
--
---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
