[ossec-list] Disable IPv6 for ossec-remoted

2017-07-09 Thread Roman Romanov
Hello, how I can disable IPv6 for ossec-remoted. Such construction doesn't work: secure 0.0.0.0 because I have this netstat's output: udp6 0 0 0.0.0.0:1514:::* 4921/ossec-remoted It's the UDP IPv6, but I

[ossec-list] OSSEC 2.9.0 don't works with Prelude SIEM

2017-07-09 Thread Roman Romanov
Hello, after upgrading from OSSEC 2.8.2 to OSSEC 2.9.0: cd ossec-hids-2.9.0/src make setprelude I have an error: # make setprelude make: *** No rule to make target 'setprelude'. Stop. Then I install OSSEC as Server via install.sh I add to ossec.conf: yes Register OSSEC in Prelude: #

Re: [ossec-list] OSSEC 2.9.0 don't works with Prelude SIEM

2017-07-09 Thread dan (ddp)
On Jul 9, 2017 7:51 AM, "Roman Romanov" <558...@gmail.com> wrote: Hello, after upgrading from OSSEC 2.8.2 to OSSEC 2.9.0: cd ossec-hids-2.9.0/src make setprelude I have an error: # make setprelude make: *** No rule to make target 'setprelude'. Stop. Then I install OSSEC as Server via

[ossec-list] Re: OSSEC 2.9.0 don't works with Prelude SIEM

2017-07-09 Thread Roman Romanov
Many thanks, it works! On Sunday, July 9, 2017 at 2:50:59 PM UTC+3, Roman Romanov wrote: > > Hello, > > after upgrading from OSSEC 2.8.2 to OSSEC 2.9.0: > cd ossec-hids-2.9.0/src > make setprelude > I have an error: > # make setprelude > make: *** No rule to make target 'setprelude'. Stop. > >

[ossec-list] Re: OSSEC log analysis settings for apache access/error.log

2017-07-09 Thread Kazim Koybasi
Thank you for your answers.Now It triggers that rule 31152 normally.I was overwrited the rule frequency in local rules and forgot that.Sorry for that mistake. On Thursday, 6 July 2017 23:37:55 UTC+3, Kazim Koybasi wrote: > > I added config below to etc/shared/agent.conf in ossec-server home >