Hi, We are using automated scripts through Chef to instal OSSEC and use ossec-authd to control key exchange. After a recent install, the Agent is sending the alerts correctly, but OSSEC(ossec_agent_control) still reports that the agent has "Never Connected". I have verified that it's same reporting host in both type of alerts.
This agent was not added manually.. It was connected using agent-auth. I verified using ./agent-control and there too, agent is listed as "Never Connected". Is there a way to find out what is causing this mismatch. We rely on messages from ossec_agent_control for creating Splunk dashboards, giving health and current status for agents. Thanks, Abhijit -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
