On Fri, Mar 11, 2016 at 1:30 PM, Ben <[email protected]> wrote: > Hi, > > I googled for the following error message and can not find anything, so I > hope someone can help in this group. > > I am using agentless to do file integrity check using the > ssh_integrity_check_linux script. Everything is working fine until I get > the following messages many times. I only have one agent talking to server > and hundreds of agentless devices.Why message is talking about remoted? > > 2016/03/10 12:55:45 ossec-remoted(1320): ERROR: Agent > 'ssh_integrity_check_linux' not found. > > Not sure why, but it looks like remoted is trying to use 'ssh_integrity_check_linux' on the agent. Could it be that you have it configured as an active-response? Could you paste your configuration, both of the manager and server?
> > If the following error message appears, scans won't start anymore even > though the defined frequency (every 12 hours) has passed, and I have to > restart it again manually. > > > 2016/03/11 09:34:52 ossec-agentlessd: ERROR: Too many failures for > 'ssh_integrity_check_linux'. Ignoring it. > This is another issue. It seems that your agentless script is failing to execute. What is your agentless configuration? How other agentlessd logs look like in ossec.log? > > Anyone have encounter these? How to troubeshoot this? > > Thanks. > Ben > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
