On Fri, Mar 16, 2018 at 3:56 PM, Carlos Islas <[email protected]> wrote: > Hello, > > I installed a new agent in a server Windows. But the problem is that the > agent is not reporting to the console. Looking in the rids folder (agent and > console) confirm that the numeric file is empity (agent) and dont have any > file there. Someone have an idea that what could it happens? or if exist a > process to force the comunication? > > Regards. >
Check the ossec.log on the agent and server. Use something like tcpdump on the server to see if the packets (udp port 1514) are making it to the ossec server. Make sure the IP address that the server is seeing matches the IP address configured for the agent in manage_agents. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
