On Jul 17, 2015 8:51 AM, "Oleg Makarov" <[email protected]> wrote: > > Yep, its active. > I dont see anything in /var/ossec/queue/syscheck :( >
Did you check on the manager? I apologize for not being more specific initially, but that info is stored on the manager. > I also try to change frequency to 600 seconds, but still the same :( > That's still very low for checking 2 hashes for every file in the configured directories. > пятница, 17 июля 2015 г., 15:28:16 UTC+3 пользователь dan (ddpbsd) написал: >> >> >> On Jul 17, 2015 6:26 AM, "Oleg Makarov" <[email protected]> wrote: >> > >> > Hello everyone! >> > I'm a newbie in ossec and I need some help. >> > I have an ossec manager and 20+ ossec agents. >> > On manager i have next conf: http://pastebin.com/4LTYNmYH >> > On agent i have next conf: http://pastebin.com/RzN5p6Zf >> > I want to see how i change /etc/ssh/sshd_config on one of my agents, I made some changes, but there are no alerts on my email. >> > What am I do wrong? >> > Thanks! >> > >> >> Is the agent connected to the manager? >> Is the entry in the ayscheck db updated (/var/ossec/queue/syscheck)? >> >> The frequency seems very low on the agent. I haven't seen much success with very low frequencies. >> >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google Groups "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. >> >> > For more options, visit https://groups.google.com/d/optout. > > -- > > --- > You received this message because you are subscribed to the Google Groups "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. > > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
