On Nov 30, 2014 11:21 AM, <[email protected]> wrote: > > I thought that was the issue too, but I have 3.1 GB of free disk space. > >
Do you have free inodes? > > -- > finid > > > > > > On 2014-11-30 09:33, dan (ddp) wrote: >> >> On Nov 30, 2014 10:11 AM, <[email protected]> wrote: >> > >> > Folks, >> > >> > I have a test system that I just started having problems with, and >> the main problem is that OSSEC is not starting. >> > >> > Debugging is enabled and when I try to start it, I get: >> > >> > "/var/ossec/bin/ossec-control: 69: /var/ossec/bin/ossec-control: >> cannot create /var/ossec/var/start-script-lock/pid: No space left on >> device" >> > >> >> Perhaps the full disk is an issue? >> >>> >> > The relevant entries from the log is below >> > >> > <ossec-log> >> > >> > ossec-analysisd: INFO: Chrooted to directory: /var/ossec, using >> user: ossec >> > ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' >> not accessible: 'Connection refused'. >> > ossec-rootcheck(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' >> not accessible: 'Connection refused'. >> > ossec-logcollector(1210): ERROR: Queue >> '/var/ossec/queue/ossec/queue' not accessible: 'Connection refused'. >> > ossec-logcollector(1211): ERROR: Unable to access queue: >> '/var/ossec/queue/ossec/queue'. Giving up.. >> > ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' >> not accessible: 'Connection refused'. >> > ossec-rootcheck(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' >> not accessible: 'Connection refused'. >> > ossec-syscheckd(1210): ERROR: Queue '/var/ossec/queue/ossec/queue' >> not accessible: 'Connection refused'. >> > ossec-rootcheck(1211): ERROR: Unable to access queue: >> '/var/ossec/queue/ossec/queue'. Giving up.. >> > >> > ossec-syscheckd did not start correctly. >> > >> > </ossec-log> >> > >> > Any idea what's causing the system to not start? >> > >> > TIA, >> > >> > >> > -- >> > finid >> > >> > -- >> > >> > --- You received this message because you are subscribed to the >> Google Groups "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, >> send an email to [email protected]. >> > For more options, visit https://groups.google.com/d/optout [1]. >> >> >> -- >> >> --- >> You received this message because you are subscribed to the Google >> Groups "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, >> send an email to [email protected]. >> For more options, visit https://groups.google.com/d/optout [1]. >> >> >> Links: >> ------ >> [1] https://groups.google.com/d/optout > > > -- > > --- You received this message because you are subscribed to the Google Groups "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
