On Thu, Mar 29, 2018, 4:32 PM Neeraj Shah <[email protected]> wrote:
> Hello All, > I am trying out Ossec with Security Onion. I manually installed the ossec > windows agent (v.2.9.3) on one of my Windows client pc, did the necessary > config and restarted the service. From the Ossec server, the agent ID > shows connected. So far so good. > Now for centralized agent config, i created /var/ossec/etc/shared/agent.conf > on the server put in a stanza for "os=windows" and restarted the ossec > server. However even after waiting about 10 mins i don't see the > agent.conf file created on my Windows client PC under C:\..\shared\ > folder. The agent log on the client shows this msg > " Error XMLERR file shared/agent.conf not found". > > So I went ahead and manually created agent.conf on the windows client and > restarted the agent again. The XML not found error did not show up this > time but the file remains empty. It is not syncing / getting the updates > from the ossec server's agent.conf > > What am i doing wrong ? > I think there was an error in the windows agent. Should be fixed in 2.9.4, I think. Not sure anyone tested it. You could try it out. > Thanks > Neeraj > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
