On Nov 4, 2015 11:27 AM, "Reinaldo Fernandes" <[email protected]> wrote: > > > 2015/11/04 08:26:11 ossec-analysisd: INFO: Total rules enabled: '1310' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: '/etc/mtab' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: '/etc/mnttab' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: '/etc/hosts.deny' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: '/etc/mail/statistics' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: '/etc/random-seed' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: '/etc/adjtime' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: '/etc/httpd/logs' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: '/etc/utmpx' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: '/etc/wtmpx' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: '/etc/cups/certs' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: '/etc/dumpdates' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: '/etc/svc/volatile' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: 'C:\WINDOWS/System32/LogFiles' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: 'C:\WINDOWS/Debug' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: 'C:\WINDOWS/WindowsUpdate.log' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: 'C:\WINDOWS/iis6.log' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: 'C:\WINDOWS/system32/wbem/Logs' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: 'C:\WINDOWS/system32/wbem/Repository' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: 'C:\WINDOWS/Prefetch' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: 'C:\WINDOWS/PCHEALTH/HELPCTR/DataColl' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: 'C:\WINDOWS/SoftwareDistribution' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: 'C:\WINDOWS/Temp' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: 'C:\WINDOWS/system32/config' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: 'C:\WINDOWS/system32/spool' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Ignoring file: 'C:\WINDOWS/system32/CatRoot' > 2015/11/04 08:26:11 ossec-analysisd: INFO: Chrooted to directory: /var/ossec, using user: ossec > 2015/11/04 08:26:11 ossec-analysisd: INFO: White listing IP: '127.0.0.1' > 2015/11/04 08:26:11 ossec-analysisd: INFO: White listing IP: '75.75.75.75' > 2015/11/04 08:26:11 ossec-analysisd: INFO: White listing IP: '75.75.76.76' > 2015/11/04 08:26:11 ossec-analysisd: INFO: 3 IPs in the white list for active response. > 2015/11/04 08:26:11 ossec-analysisd: INFO: White listing Hostname: 'localhost.localdomain' > 2015/11/04 08:26:11 ossec-analysisd: INFO: 1 Hostname(s) in the white list for active response. > 2015/11/04 08:26:11 ossec-analysisd: INFO: Started (pid: 3564). > 2015/11/04 08:26:11 ossec-analysisd: SyscheckInit completed. > 2015/11/04 08:26:11 ossec-analysisd: RootcheckInit completed. > 2015/11/04 08:26:11 ossec-analysisd(1103): ERROR: Unable to open file '/queue/fts/hostinfo'.
Does /var/ossec/queue/fts exist? What are the permissions? `ls -ld /var/ossec/queue/fts` How did you install OSSEC? What version are you running? > 2015/11/04 08:26:11 ossec-analysisd: OS_CreateEventList completed. > 2015/11/04 08:26:11 ossec-analysisd(1103): ERROR: Unable to open file '/queue/fts/fts-queue'. > 2015/11/04 08:26:11 ossec-analysisd(1260): ERROR: Error initiating FTS list > > -- > > --- > You received this message because you are subscribed to the Google Groups "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
