On Mon, Jul 9, 2018 at 1:30 AM, Chinmay Pandya <[email protected]> wrote: > I do no see any info on ossec logs that suggest remoted is crashing. > > any way i can confirm this ? >
When ossec-remoted starts it logs to the ossec.log. Look for entries like this: 2018/07/11 10:49:34 ossec-remoted: INFO: Started (pid: 23255). I'm not sure why you'd get stale pid files if the process isn't restarting. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
