On Mon, Jun 18, 2018 at 9:52 AM, <david.mo...@allianz-assistance.ca> wrote: > > > On Monday, June 18, 2018 at 8:02:51 AM UTC-4, dan (ddpbsd) wrote: >> >> On Fri, Jun 15, 2018 at 1:46 PM, <david...@allianz-assistance.ca> wrote: >> > I am new to OSSEC and have the server running and over 1000 agents >> > listed. >> > the things that I am attempting to figure out are as follows >> > >> > 1) Of the over 1000 windows agents that are Active I never see any >> > alerts >> > for them >> >> Are the agents able to successfully connect? Check an agent's >> ossec.log to make sure. >> >> > 2) The OSSEC Server log has many alerts >> >> /var/ossec/logs/alerts/alerts.log? Are the alerts in there only from >> the OSSEC server? I do see Microsoft-Windows-Security-Auditing log event >> entries in the log file. Why are these not been reported in Atomic Secure >> Linux Agent Window >>
Not sure, I've never used it. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
