On Mar 21, 2015 6:42 PM, "Nhen Panha" <panhan...@gmail.com> wrote: > > I don't what to check. > Could you tell me everything that i need to check? >
Probably not, not all at once anyway. Troubleshooting rarely works that way. I'd start by checking whether ossec-execd is running. Check permissions and ownership in the queue directory. Make sure active response isn't disabled. > > On Sunday, March 22, 2015 at 2:36:52 AM UTC+7, Nhen Panha wrote: >> >> When I config ossec, I always error these: >> >> >> ERROR: Queue '/queue/alerts/ar' not accessible: 'Connection refused'. >> >> ossec-analysisd(1301): ERROR: Unable to connect to active response queue. >> >> >> Thank for your help! > > -- > > --- > You received this message because you are subscribed to the Google Groups "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
