OSSEC running Agents on servers connected but NO events are logging??
During one of the last updates OSSEC stopped collecting from the servers it is installed on. I checked all agents and they have connection to server. Network is working fine. I also restarted the system and also the various agents on each server. Connection is establlished but it is only sending keep alive on agent side and logging NOTHING on the Alienvault side. Any ideas??? I just ran the verify-agent-config and it comes back with agent.conf not found. Checked directory and agent.conf is not there. Is that the cause?? if so is there a generic or backup version that I can put in without having to redo all the servers?
0 · ·