On Tue, Jun 2, 2015 at 10:24 AM, James Siegel <[email protected]> wrote: > > not 2.9 > > Starting OSSEC HIDS v2.8 (by Trend Micro Inc.)... > > and I downloaded directly >
Try 2.9. According to the documentation, that feature will be introduced in 2.9: http://ossec-docs.readthedocs.org/en/latest/syntax/head_ossec_config.global.html?highlight=json#element-jsonout_output > > On Tuesday, June 2, 2015 at 10:21:08 AM UTC-4, dan (ddpbsd) wrote: >> >> On Tue, Jun 2, 2015 at 10:18 AM, James Siegel <[email protected]> wrote: >> > I edit my /var/ossec/etc/ossec.conf on the server... the <global> >> > </global> section >> > >> > I add <jsonout_output>yes</jsonout_output> >> > >> > and restart my ossec server >> > >> > /var/ossec]# bin/ossec-control restart >> > Killing ossec-monitord .. >> > Killing ossec-logcollector .. >> > Killing ossec-remoted .. >> > Killing ossec-syscheckd .. >> > Killing ossec-analysisd .. >> > Killing ossec-maild .. >> > Killing ossec-execd .. >> > OSSEC HIDS v2.8 Stopped >> > Starting OSSEC HIDS v2.8 (by Trend Micro Inc.)... >> > OSSEC analysisd: Testing rules failed. Configuration error. Exiting. >> > >> > >> > once I remove that line in my global section it starts fine >> > it is only when I try adding json out that it appears to fail on me >> > >> >> Did you download the 2.9 beta, or clone the git repository directly? >> >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google >> > Groups >> > "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> > an >> > email to [email protected]. >> > For more options, visit https://groups.google.com/d/optout. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
