On Fri, Jun 10, 2016 at 6:26 PM, Jacob Mcgrath <jacob.xtrememe...@gmail.com> wrote: > The script will write each line as the bash script as the check fails. This > log is deleted if first creation is older than 7 days( since the record > would remain in Ossec archive). > > I thought it may be already accessed by the script as it runs every 3-5 mins > but do not think this is the cause ( i removed the cron job in control of it > and the problem continues. > > Wonder if it is a issue with adding additional <localfile> logs to monitor > on the server its self. Was Trying running route checks and other serving > core ping checks from the Ossec server its self instead of firing up other > VM's to run these lesser checks. >
Something like nagios probably makes more sense for this. But regarding the log file problem, do you have selinux enabled? Is it blocking access to the log file? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
