The temporary files are located at /var/ossec/logs/ directory with file names looking like ".report-%d.log", where %d is a number (pid). The ERROR message means such a temporary file cannot be opened for WRITE.
Check if any such old files exist. You may want to clean them up. On Nov 15, 1:56 am, Holger Gläß <holger.gla...@asknet.de> wrote: > On 11/14/2011 10:19 AM, Holger Gläß wrote: > > > hi > > i got this weekend this error message below ... > > > ossec-monitord: ERROR: Unable to open temporary reports file. > > nobody knows ? > > it is the 2.6 version , and i disable all configured reports > in ossec.conf to fix the problem. > > holger > > > > > > > > > > > whats wrong ? , > > > a simple > > > cat logs/alerts/alerts.log | bin/ossec-reportd > > > works. > > > holger
