On Tue, Feb 14, 2017 at 6:24 PM, aiborin <abo...@transunion.com> wrote: > I am running v2.8.3-53. > > Please explain what you mean by "what is my remote config?" > - I checked ossec.conf and only see a setting related to running remote > connections secure (default port 1514). >
So, this? <remote> <connection>secure</connection> </remote> > Will run in debug overnight to see what it produces. > > > > On Monday, February 13, 2017 at 8:51:02 AM UTC-8, dan (ddpbsd) wrote: >> >> >> >> On Feb 13, 2017 11:48 AM, "aiborin" <abo...@transunion.com> wrote: >> >> I am running an OSSEC server in each of my two data centers. In one data >> center, the server will stop the ossec-remoted service multiple times a >> week. There is nothing in /var/ossec/logs/ossec.log to indicate why. I get >> the following output when running /var/ossec/bin/ossec-control status: >> >> ossec-remoted: Process XXXXX not used by ossec, removing .. >> ossec-remoted not running… >> >> >> This situation, of course, results in loss of communication with all >> agents. >> >> I can mitigate the impact by running a cron job that restarts >> ossec-remoted but this only masks the underlying problem. I have searched >> Google but have not found a way in which to isolate the source of this >> problem and am hoping someone monitoring the list can provide a possible >> solution. >> >> >> What version of ossec? >> What's your remote config? >> Try running itin debug/foreground to see if it provides more info >> `/var/ossec/bin/ossec-remoted -df` >> >> >> >> Regards, >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to ossec-list+...@googlegroups.com. >> For more options, visit https://groups.google.com/d/optout. >> >> > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.