On Tue, Mar 17, 2015 at 5:39 PM, Brian Kellogg <[email protected]> wrote: > I added the below to the ossec.conf file on the OSSEC server, then restart > the ossec processes. But, when I run ossec_control -L the new command isn't > listed. > > <command> > <name>try-this</name> > <executable>try-this.cmd</executable> > <expect /> > <timeout_allowed>no</timeout_allowed> > </command> >
Do you have an AR setup to use this command? Does the executable exist on the agent? You can look in merged.mg for evidence of this command as well. > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
