Hi Don, I got the agent to connect finally, but nothing that I do or change on my server I don't get an alert for. I see this error in the log on the agent: *ossec-agent: More than 600 seconds without server response...sending win32info*
I don't see any error in the Server log. On 18 November 2015 at 07:44, dan (ddp) <[email protected]> wrote: > On Fri, Nov 13, 2015 at 10:36 PM, Mellisa <[email protected]> wrote: > > I have been experiencing the same issue withe agent failing after > upgrading > > from 2.4.X to 2.8.3 the agent will not connect to the server. I have the > > server running on Centos 7 and I have check my log and i see no error. I > > will attempt this again in the coming week withe the newly implies agent > and > > see if I have better luck. > > > > If anyone have any ideas please feel free to make suggestion. > > > > Start the manager processes in debug mode: > `/var/ossec/bin/ossec-control enable debug && > /var/ossec/bin/ossec-control restart` > > Then restart the agent processes/service, and see if any log messages > applicable to the issue are created. > > Are there any logs on the agents that might give us a clue as to what > the problem is? > > > > > > On Monday, November 9, 2015 at 10:06:40 AM UTC-5, Andrei Duca wrote: > >> > >> Hi guys, > >> > >> > >> > >> I downloaded the OSSEC agent 2.8.3 for Windows and when I run it nothing > >> happens. > >> > >> From cmd it asks for a path as parameter and when one is added I get the > >> following errors: > >> > >> > >> > >> C:\ossec-agent-win32-2.8.3.exe C:\Ossec > >> > >> [SC] OpenService FAILED 1060: > >> > >> > >> > >> The specified service does not exist as an installed service. > >> > >> > >> > >> 2015/11/10 00:43:12 setup-windows: INFO: System is Vista or newer > >> (Microsoft Win > >> > >> dows Server 2008 R2 Datacenter Edition (full) Service Pack 1 (Build > 7601) > >> - OSSE > >> > >> C HIDS v2.8.3). > >> > >> The system cannot find the file specified. > >> > >> The system cannot find the file specified. > >> > >> The system cannot find the file specified. > >> > >> The system cannot find the file specified. > >> > >> The system cannot find the file specified. > >> > >> Are you sure (Y/N)?processed file: C:\Tools\Ossec\ossec.log > >> > >> The system cannot find the file specified. > >> > >> The system cannot find the file specified. > >> > >> The system cannot find the file specified. > >> > >> The system cannot find the file specified. > >> > >> The system cannot find the file specified. > >> > >> > >> > >> Is the compiled version for Windows broken or am I doing something > wrong? > >> > >> > >> > >> Thanks for your help. > >> > >> Andrei > > > > -- > > > > --- > > You received this message because you are subscribed to the Google Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [email protected]. > > For more options, visit https://groups.google.com/d/optout. > > -- > > --- > You received this message because you are subscribed to a topic in the > Google Groups "ossec-list" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/ossec-list/bTC6_6-Cqco/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- Best Regards, *Nicola Farquharson* *IT Consultant* M: 1-519-630-9409 Skype: Nicolaja [email protected] This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
