Hi Dan, i have success when run this command below. # su ossec -s /bin/bash -c 'cd /var/ossec && expect agentless/ssh_generic_diff user_ossec@SERVIDOR-01 ls -lah' Connection to SERVIDOR-01 closed. INFO: Finished.
this log error in first post is only "expect" don't run this command? Em quarta-feira, 15 de março de 2017 16:21:03 UTC-3, dan (ddpbsd) escreveu: > > On Mon, Mar 13, 2017 at 9:59 AM, Eduardo Reichert Figueiredo > <[email protected] <javascript:>> wrote: > > Dear all, > > i have the ERROR below in my ossec server, and not generated alerts from > > Linux (agentless) in ossec. > > I search more error similars in this foruns but i dont founded solution. > > > > Can you help me? > > > > 2017/03/13 10:42:35 ossec-agentlessd: DEBUG: buffer: [ossec@SERVIDOR-01 > ~]$ > > 2017/03/13 10:42:35 ossec-agentlessd: ERROR: ssh_generic_diff: > > ossec@SERVIDOR-01: Timeout while connecting to host: ossec@SERVIDOR-01 . > > 2017/03/13 10:52:01 ossec-agentlessd: DEBUG: buffer: spawn ssh > > ossec@SERVIDOR-01 > > 2017/03/13 10:52:01 ossec-agentlessd: DEBUG: buffer: Last login: Mon Mar > 13 > > 10:42:15 2017 from 192.168.140.84 > > 2017/03/13 10:52:21 ossec-agentlessd: DEBUG: buffer: [ossec@SERVIDOR-01 > ~]$ > > 2017/03/13 10:52:21 ossec-agentlessd: ERROR: ssh_integrity_check_linux: > > ossec@SERVIDOR-01: Timeout while connecting to host: ossec@SERVIDOR-01 . > > 2017/03/13 10:52:22 ossec-agentlessd: DEBUG: buffer: spawn ssh > > ossec@SERVIDOR-01 > > 2017/03/13 10:52:22 ossec-agentlessd: DEBUG: buffer: Last login: Mon Mar > 13 > > 10:52:01 2017 from 192.168.140.84 > > 2017/03/13 10:52:42 ossec-agentlessd: DEBUG: buffer: [ossec@SERVIDOR-01 > ~]$ > > 2017/03/13 10:52:42 ossec-agentlessd: ERROR: ssh_generic_diff: > > ossec@SERVIDOR-01: Timeout while connecting to host: ossec@SERVIDOR-01 . > > > > Try running the script maually: > `cd /var/ossec && expect agentless/ssh_generic_diff AGENTLESSINFO ARGS` > > Replace AGENTLESSINFO with the <host> information from your > ossec.conf, and ARGS with the <arguments> info. > > > > > Kind regards > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
