That fixed the issue. Thanks. On Wednesday, April 25, 2007 at 6:54:14 PM UTC+5:30, John Lewis wrote: > > What appears to have resolved the issue was making sure the group apache > runs as > (in my case www), had write access to the tmp directory in the ossec-wui > html > directory. > > It is working now for me. > > -JL > > -----Original Message----- > From: ossec...@googlegroups.com <javascript:> [mailto: > ossec...@googlegroups.com <javascript:>] On Behalf > Of John Lewis > Sent: Tuesday, April 24, 2007 8:50 AM > To: 'Daniel Cid'; ossec...@googlegroups.com <javascript:> > Subject: [ossec-list] Re: ossec-wui search results shows totals, but no > details > of results > > > I have a very small install (hoping to get bigger...), with very few > alerts, and > have the below php settings. No changes. Any other ideas? Turn on php > debugging? > > -JL > > -----Original Message----- > From: Daniel Cid [mailto:danie...@gmail.com <javascript:>] > Sent: Monday, April 23, 2007 8:53 PM > To: ossec...@googlegroups.com <javascript:> > Cc: John Lewis > Subject: Re: [ossec-list] ossec-wui search results shows totals, but no > details > of results > > Hi John, > > Can you try increasing the timeout values on PHP (php.ini)? I saw this > happening before > when the PHP "max_execution_time" was reached (default of 15 secs). You can > probably increase it to 180 seconds (or longer). > > The following numbers should be good: > > max_execution_time = 180 > max_input_time = 180 > memory_limit = 30M > > More info: http://www.ossec.net/wiki/index.php/OSSECWUI:Install > > Let us know if it helps or not. > > Thanks, > > -- > Daniel B. Cid > dcid ( at ) ossec.net > > On 4/23/07, John Lewis <jnl...@arachnerd.com <javascript:>> wrote: > > I'm using the ossec-wui 0.02 with ossec 1.1 on a linux server > > > > The search results, no matter what I put in as variables, shows the total > alerts > > found (some number based on the search variables), then "Nothing > returned (or > > search expired)." in red. > > > > It does not list the search results themselves. Should it? Could it? > > > > Screenshot attached > > > > > > The home page shows a list of recent alerts, connected agents and most > recently > > changed files, so the data is visible to the ossec-wui. > > > > Where can I look/check to see why I'm getting a search results total, > but no > > detail of the results. > > > > Thanks. > > > > John > > > > > > > > >
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.