Re: [ossec-list] Active response on server not working

2016-10-15 Thread dan (ddp)
On Oct 15, 2016 10:51 AM, "Herman Harperink" wrote: > > I've found that AR is working on my agents, but not on my server. AR is set to ALL on my server. > Did I miss something? > > Version 2.8.3 on Debian. AR log on the server is empty, but not on my agents. > Should I

Re: [ossec-list] Test

2016-10-15 Thread dan (ddp)
On Oct 15, 2016 10:51 AM, "Herman Harperink" wrote: > > Posted two times here, don't see my posts. Please ignore / delete. > I was asleep for the first one, and had a rushy sort of morning. They're posted now, and I'll try harder in the future. > -- > > --- > You

[ossec-list] Test

2016-10-15 Thread Herman Harperink
Posted two times here, don't see my posts. Please ignore / delete. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com.

[ossec-list] Active response on server not working

2016-10-15 Thread Herman Harperink
I've found that AR is working on my agents, but not on my server. AR is set to ALL on my server. Did I miss something? Version 2.8.3 on Debian. AR log on the server is empty, but not on my agents. Should I have installed the server in hybrid mode? Thanks. -- --- You received this message

[ossec-list] Active response on server

2016-10-15 Thread Herman Harperink
Hi, It seems to me that active response doesn't work on the Ossec server as soon as you add an agent. I can't find any docs on this. Is this normal, should the Ossec server run in hybrid mode to get this working? I've tested this with 2.8.3. After installing the server AR did work on the