On Tue, Nov 20, 2012 at 11:08 AM, Francisco Jelves <francisco.jel...@gmail.com> wrote: > After running OSSEC server upgrade 2.6 to 2.7 final release, the / var / > ossec / logs / alerts / alerts.log is zero bytes. > The following command displays all disconnected agents: if Never connected. > . / agent_control-l > > OSSEC HIDS agent_control. List of available agents: > ID: 000 Name: serverxxx (server) IP: 127.0.0.1, Active / Local > ID: 1024 Name: xxx, IP: any, Disconnected > ID: 1025 Name: xxx, IP: any, Disconnected > ... > ID: 5575, Name: xxx, IP: any, Never connected > ID: 5576, Name: xxx, IP: any, Never connected > > Any recommendations? I'm thinking about going back to 2.6, but I'd like > OSSEC 2.7 server and use your new features. > Thanks a lot, > Frank
Have you tried restarting the agents? What about looking at the ossec.log files? Did you update the agents as well?
