On Tue, Nov 3, 2015 at 7:09 AM, Reinaldo Fernandes <[email protected]> wrote: > Hello, > > > > My name is Reinaldo Fernandes and I’m contacting you regarding the Ossec > solution > > I have been trying to deploy this on our environment ( Windows mainly) but > the agent it’s not able to communicate with the Ossec server (They are both > on the same VLAN, no firewall between). > > > > This is the error: > > > > 2015/11/03 10:44:47 ossec-agent: INFO: Trying to connect to server > (172.20.21.43:1514). > > > > 2015/11/03 10:44:47 ossec-agent: INFO: Using IPv4 for: 172.20.21.43 . > > > > 2015/11/03 10:45:09 ossec-agent(4101): WARN: Waiting for server reply (not > started). Tried: '172.20.21.43'. > > > > When I try to look up at the logs on the Ossec server this is the only info > that I got: > > > > [root@ossec user]# /var/ossec/logs/ossec.log > > /var/ossec/logs/ossec.log: line 1: syntax error near unexpected token `(' > > /var/ossec/logs/ossec.log: line 1: `2015/06/12 15:52:36 > ossec-monitord(1225): INFO: SIGNAL Received. Exit Cleaning...' > > > > Any clue or tip on how to solve this situation? >
The ossec.log lines don't look familiar. Are there any lines preceding those that might provide more of a clue? It kind of looks like there is an issue with the ossec.conf on the manager. > > > Reinaldo Fernandes > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
