Yes, the ossec-execd is running on both server and agent boxes. dan (ddpbsd)於 2013年5月31日星期五UTC+9下午11時14分39秒寫道： > > On Wed, May 22, 2013 at 8:05 PM, Macus <[email protected] <javascript:>> > wrote: > > I have a cron job script to restart the ossec agent remotely. Some how > the > > script triggered the agent_control to restart the remote agent, but the > > agent did not restart . > > > > I have checked the cron job log and confirm the agent_control try to > restart > > the agaent. > > May 23 01:00:59 PC01 logger[11668]: OSSEC HIDS agent_control: Restarting > > agent: 041 > > > > > > But, it seems the agent did nothing. > > 2013/05/23 01:00:11 ossec-agentd(1218): ERROR: Unable to send message to > > server. > > 2013/05/23 01:07:28 ossec-agentd: INFO: Event count after '20000': > > 3453966->2987888 (86%) > > 2013/05/23 01:55:24 ossec-agentd: INFO: Event count after '20000': > > 3460847->2994840 (86%) > > > > > > Is ossec-execd running? > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/groups/opt_out. > > > > >
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
