That fixed the issue. Thanks.

On Wednesday, April 25, 2007 at 6:54:14 PM UTC+5:30, John Lewis wrote:
>
> What appears to have resolved the issue was making sure the group apache 
> runs as
> (in my case www), had write access to the tmp directory in the ossec-wui 
> html
> directory.
>
> It is working now for me.
>
> -JL
>
> -----Original Message-----
> From: ossec...@googlegroups.com <javascript:> [mailto:
> ossec...@googlegroups.com <javascript:>] On Behalf
> Of John Lewis
> Sent: Tuesday, April 24, 2007 8:50 AM
> To: 'Daniel Cid'; ossec...@googlegroups.com <javascript:>
> Subject: [ossec-list] Re: ossec-wui search results shows totals, but no 
> details
> of results
>
>
> I have a very small install (hoping to get bigger...), with very few 
> alerts, and
> have the below php settings.  No changes.  Any other ideas?  Turn on php
> debugging?
>
> -JL
>
> -----Original Message-----
> From: Daniel Cid [mailto:danie...@gmail.com <javascript:>] 
> Sent: Monday, April 23, 2007 8:53 PM
> To: ossec...@googlegroups.com <javascript:>
> Cc: John Lewis
> Subject: Re: [ossec-list] ossec-wui search results shows totals, but no 
> details
> of results
>
> Hi John,
>
> Can you try increasing the timeout values on PHP (php.ini)? I saw this
> happening before
> when the PHP "max_execution_time" was reached (default of 15 secs). You can
> probably increase it to 180 seconds (or longer).
>
> The following numbers should be good:
>
> max_execution_time = 180
> max_input_time = 180
> memory_limit = 30M
>
> More info: http://www.ossec.net/wiki/index.php/OSSECWUI:Install
>
> Let us know if it helps or not.
>
> Thanks,
>
> --
> Daniel B. Cid
> dcid ( at ) ossec.net
>
> On 4/23/07, John Lewis <jnl...@arachnerd.com <javascript:>> wrote:
> > I'm using the ossec-wui 0.02 with ossec 1.1 on a linux server
> >
> > The search results, no matter what I put in as variables, shows the total
> alerts
> > found (some number based on the search variables), then "Nothing 
> returned (or
> > search expired)." in red.
> >
> > It does not list the search results themselves.  Should it?  Could it?
> >
> > Screenshot attached
> >
> >
> > The home page shows a list of recent alerts, connected agents and most
> recently
> > changed files, so the data is visible to the ossec-wui.
> >
> > Where can I look/check to see why I'm getting a search results total, 
> but no
> > detail of the results.
> >
> > Thanks.
> >
> > John
> >
> >
> >
>
>
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to