Hi, i have a test setup with a windows agent and a server CentOS. I wrote a .bat to install agent and it seems ok, but looking at the logs it only says
2017/11/14 11:14:27 ossec-agentd(4101): WARN: Waiting for server reply (not started). Tried: 'serverhost.stuff'. 2017/11/14 11:15:05 ossec-agentd: INFO: Trying to connect to server serverhost.stuff, port 1514. 2017/11/14 11:15:05 INFO: Connected to serverhost.stuff at address 10.10.x.y:1514, port 1514 2017/11/14 11:15:26 ossec-agentd(4101): WARN: Waiting for server reply (not started). Tried: 'serverhost.stuff'. 2017/11/14 11:16:22 ossec-agentd: INFO: Trying to connect to server serverhost.stuff, port 1514. 2017/11/14 11:16:22 INFO: Connected to serverhost.stuff at address 10.10.x.y:1514, port 1514 2017/11/14 11:16:43 ossec-agentd(4101): WARN: Waiting for server reply (not started). Tried: 'serverhost.stuff'. 2017/11/14 11:17:57 ossec-agentd: INFO: Trying to connect to server sep0265cb.sep.local, port 1514. 2017/11/14 11:17:57 INFO: Connected to serverhost.stuff at address 10.10.x.y:1514, port 1514 It goes forever! It means it is working? May i change some value of time between keep alive messages? Also im receiving errors with agent.conf that i already saw in other posts. ERROR: Error reading XML file 'shared/agent.conf': XMLERR: File 'shared/agent.conf' not found. (line 16). Im convinved i have a connection issue or udp cache stuff. But cant figure out. All this together can be a connection issue? Or misconfiguration? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
