Hi, Well, I hope to find another way to solve my problem.... I'm not a programmer ! I will try to install an older version, just for test !
Thanks for your help. Best regards Thomas Le jeudi 22 janvier 2015 17:13:56 UTC+1, dan (ddpbsd) a écrit : > > On Thu, Jan 22, 2015 at 11:01 AM, Thomas Vidal <[email protected] > <javascript:>> wrote: > >> Dear Dan, > >> > >> Where do you think the bug is? > >> Are you sure ossec-execd is running on the agent? > > > > YES ! > >> > >> Is AR disabled on the agent or manager? > > > > There is no <disable>YES</disable> both in ossec.conf and agent.conf > (and > > normaly following the documentation AR is enable by default) > >> > >> Can you add some debug logs to the manager and maybe agent to log when > > > > I set debug=2 everywhere in internal_options.conf on the server and > > clients... and I have nothing else related to my problem ! > >> > >> AR is getting triggered? > > > > What do you mean ? > > > > I mean add some debug statements to the code and recompile. I think > AR's logging is pretty bad, so I think you'd have to add more logging > statements to make it better. > > > Many thanks for your help. > >> > >> > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
