> > If you have commands in your agent.conf, you need to set > "logcollector.remote_commands" to "1" in internal_options.conf. > > https://ossec.github.io/docs/syntax/head_internal_options.analysisd.html?highlight=remote%20command#intopt-logcollector.remote_commands=0 > > > now i have logcollector.remote_commands=0, so which is mean that my client use agent.conf from server? i have agent.conf on a client to, is it apply to client?
> > Clients use "/var/ossec/etc/ossec.conf" and > "/var/ossec/etc/shared/agent.conf." > The agent.conf comes from the server. > Some configurations can be set in the agent.conf, but not all. > Unfortunately there > isn't a good list of which works where. > > > > how can i resolv this error ossec-logcollector(1202): ERROR? > > So this error, how can i resolv? > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
