Hi. Every setting at agent.conf needs to be inside a <agent_config> section, otherwise the configuration reader may fail. So, please relocate the tags <rootcheck> and <active_response> that are outside <agent_config> and restart the agent.
If the problem persists, enable debugging logs editing the file internal_options.conf and changing the setting windows.debug from 0 to 2 and restart the agent. This way you can see more details at the log. Kind regards. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
