On Tue, Jun 2, 2015 at 10:18 AM, James Siegel <[email protected]> wrote: > I edit my /var/ossec/etc/ossec.conf on the server... the <global> > </global> section > > I add <jsonout_output>yes</jsonout_output> > > and restart my ossec server > > /var/ossec]# bin/ossec-control restart > Killing ossec-monitord .. > Killing ossec-logcollector .. > Killing ossec-remoted .. > Killing ossec-syscheckd .. > Killing ossec-analysisd .. > Killing ossec-maild .. > Killing ossec-execd .. > OSSEC HIDS v2.8 Stopped > Starting OSSEC HIDS v2.8 (by Trend Micro Inc.)... > OSSEC analysisd: Testing rules failed. Configuration error. Exiting. > > > once I remove that line in my global section it starts fine > it is only when I try adding json out that it appears to fail on me >
Did you download the 2.9 beta, or clone the git repository directly? > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
