On Fri, Dec 29, 2017 at 1:08 PM, <[email protected]> wrote: > Hello All > > I do not know how to get ossec agent to update. > > All the permissions are set correctly both on the agent and main server. > > I have bi-lateral communication between them. > > I can control the agent via the master. > > There are no errors within the ossec log on both computers. > > I have checked the agent.conf file and file permissions are correct. > > The agent.conf file is being ignored. > > Theses are all Linux servers and running the current 2.x version of the > OSSEC. > > There is nothing in the log files that indicates there is a problem. The log > files are clean of any issues. > > I do not know how to force the agent.conf to be read and apply the config > changes. >
There shouldn't be anything you need to change to get the agent.conf to be read. I sometimes add a mistake into the agent.conf to make sure it's being read. This can be as simple as adding a logfile option for a non-existent log file. This produces an error in the ossec.log that I can easily look for. > Please can you help. > > Thanks > Chuck > > > > ________________________________ > > This email and any files transmitted with it are considered privileged and > confidential unless otherwise explicitly stated otherwise. If you are not > the intended recipient you are notified that disclosing, copying, > distributing or taking any action in reliance on the contents of this > information is strictly prohibited. All email data and contents may be > monitored to ensure that their use is authorized, for management of the > system, to facilitate protection against unauthorized use, and to verify > security procedures, survivability and operational security. Under no > circumstance should the user of this email have an expectation of privacy > for this correspondence. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
