[ossec-list] Re: errors in ossec clients

2018-03-13 Thread Igor
I have edit /var/ossec/etc/ossec.conf on a client my_ip and get this error Started ossec-agentd... 2018/03/13 11:33:40 ossec-logcollector: Remote commands are not accepted from the manager. Ignoring it on the agent.conf 2018/03/13 11:33:40 ossec-logcollector(1202): ERROR: Configur

Re: [ossec-list] Re: errors in ossec clients

2018-03-13 Thread dan (ddp)
On Tue, Mar 13, 2018 at 4:40 AM, Igor <6513...@gmail.com> wrote: > I have edit /var/ossec/etc/ossec.conf on a client > > > > > > my_ip > > > > and get this error > > Started ossec-agentd... > 2018/03/13 11:33:40 ossec-logcollector: Remote commands are not accepted > from the manager. I

Re: [ossec-list] ossec-logtest verbosity levels...

2018-03-13 Thread dan (ddp)
On Mon, Mar 12, 2018 at 4:46 PM, Ian Brown wrote: > Is it possible to crank up the verbosity of ossec-logtest so that I can see > if individual lines in a rule match? I'm stuck on something that's got me > flustered. > > I've got what I think is a simple rule, but damn if I can get it to work: >

Re: [ossec-list] Re: errors in ossec clients

2018-03-13 Thread Igor
> > If you have commands in your agent.conf, you need to set > "logcollector.remote_commands" to "1" in internal_options.conf. > > https://ossec.github.io/docs/syntax/head_internal_options.analysisd.html?highlight=remote%20command#intopt-logcollector.remote_commands=0 > > > now i have logcol

Re: [ossec-list] Re: errors in ossec clients

2018-03-13 Thread Igor
вторник, 13 марта 2018 г., 16:20:58 UTC+3 пользователь Igor написал: > > > >> If you have commands in your agent.conf, you need to set >> "logcollector.remote_commands" to "1" in internal_options.conf. >> >> https://ossec.github.io/docs/syntax/head_internal_options.analysisd.html?highlight=remo

Re: [ossec-list] Re: errors in ossec clients

2018-03-13 Thread dan (ddp)
On Tue, Mar 13, 2018 at 9:33 AM, Igor <6513...@gmail.com> wrote: > > > вторник, 13 марта 2018 г., 16:20:58 UTC+3 пользователь Igor написал: >> >> >>> >>> If you have commands in your agent.conf, you need to set >>> "logcollector.remote_commands" to "1" in internal_options.conf. >>> >>> https://osse

Re: [ossec-list] Re: errors in ossec clients

2018-03-13 Thread Igor
вторник, 13 марта 2018 г., 18:08:44 UTC+3 пользователь dan (ddpbsd) написал: > > On Tue, Mar 13, 2018 at 9:33 AM, Igor <651...@gmail.com > > wrote: > > > > > > вторник, 13 марта 2018 г., 16:20:58 UTC+3 пользователь Igor написал: > >> > >> > >>> > >>> If you have commands in your agent.con

Re: [ossec-list] Re: errors in ossec clients

2018-03-13 Thread dan (ddp)
On Mar 13, 2018 12:23 PM, "Igor" <6513...@gmail.com> wrote: вторник, 13 марта 2018 г., 18:08:44 UTC+3 пользователь dan (ddpbsd) написал: > On Tue, Mar 13, 2018 at 9:33 AM, Igor <651...@gmail.com> wrote: > > > > > > вторник, 13 марта 2018 г., 16:20:58 UTC+3 пользователь Igor написал: > >> > >> >

[ossec-list] Installation of OSSEC on RED HAT 7 Cluster

2018-03-13 Thread Niraj Kumar
Hello Team, I am finding trouble with a pointing agent to floating point on the cluster. An agent gets connected directly to the nodes without any issue but whenever I try to use floating IP which points back to the active node, agent disconnected from the active ossec node. Regards, Niraj