Hi, it seems that* full command* cannot be used in the agent.conf:
- command and full_command cannot be used in the agent.conf, and must be configured in each system’s ossec.conf. (Documentation <http://ossec-docs.readthedocs.io/en/latest/syntax/head_ossec_config.localfile.html#element-log_format> ). I'll check it. Regards. Jesus Linares. On Sunday, May 1, 2016 at 1:52:31 AM UTC+2, Robert Bardo wrote: > > Couple things I noticed.. > > I would use a .cmd, not .bat as I seem to vaguely remember a .cmd must be > used.. it works now for me. > > Next, the shared command executable must be put in the server /shared > directory and will be replicated to the correct client side folder. > > Lastly, why not use "auto OSSEC"? I had used it with much success. > > Cheers. Rob > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.