2015-04-07 21:55 GMT+03:00 Sinisha Erceg <[email protected]>: > Hello, > > > > I apologize in advance for lack of understanding and I’ve attempted to > look through the forums but I have inherited OSSEC from a predecessor and I > have limited *nix experience. I’ve managed to fix some items but some are > still very bewildering. > > > > I’ll start with the error: ERROR: Invalid ID for the source ip: 'x.x.x.x' > and the IP addresses they list are nowhere in our agent listing. I’m > having issues even trying to discover the host that this error is > indicating but there are a whole bunch of these for IP addresses that we > have not installed OSSEC on. > > > > Where can I start to look? Again, without going into this too much more, > I have attempted to search the forums and can find information generally on > this error if the IP is valid but I’m stumped on the fact that it’s giving > me this error knowing that those IPs have never been added to the server. > > > > Any assistance would be greatly appreciated. > > > Hi,
Agent key contains ip address of agent, if ANY is not used instead of ip address. check the documentation about agents: http://ossec-docs.readthedocs.org/en/latest/manual/agent/agent-management.html -- Eero -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
