I've got the agent running on Windows and it works ok for me. Are you looking
in /var/ossec/logs/alerts? Is your alerts.log file showing only events from
your server, and nothing from your Windows client? I'm trying to get a clearer
picture of what you're seeing (or *not* seeing).
Kurt
perl -e "($_='tjgvlvsuAzbipp/dpn')=~s/(.)/chr(ord($1)-1)/ge;print"
-----
Society doesn't understand me and technology fears me.
----- Original Message ----
From: mohrenfabian <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Sent: Sunday, November 12, 2006 2:16:47 PM
Subject: [ossec-list] Question about the Windows Agent
Hello,
i've installed a Server of my Archlinux Box - and the Agent on the
Windows machine.
The Key is correct imported. I can see the right connection from the
client (/var/ossec/queue/agent-info) or with "list_agents -a".
Under /var/ossec/queue/syscheck - i can see a logfile from the client (i
've deleted some file - these files are listed).
But i got no message at /var/ossec/log/....?
Have anybody a idea?
Best Regards
Fabian
___________________________________________________________
Telefonate ohne weitere Kosten vom PC zum PC: http://messenger.yahoo.de
____________________________________________________________________________________
Do you Yahoo!?
Everyone is raving about the all-new Yahoo! Mail beta.
http://new.mail.yahoo.com
