I also see the above on a Linux box (Ubuntu 14). On Tuesday, April 21, 2015 at 10:07:28 AM UTC-4, Bob Jolliffe wrote: > > I am seeing the following in my ossec.log on a linux agent: > > ossec-execd: INFO: Active response command not present: > '/var/ossec/active-response/bin/restart-ossec.cmd'. Not using it on > this system > > It is true that command is not present. It looks maybe this is the > command for a windows agent. What I do have is: > > /var/ossec/active-response/bin/restart-ossec.sh > > Is there a configuration option I need to set somewhere to tell what > the active response command should be? >
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
