It wass an issue with https not apt,i solved installing the https transport. Now i wanna create some custom decoder and rules, when the new line is added.in log file which contain "error" to get an alert,but no succes.Any idea how ?? Thanks in advance.
On Friday, August 24, 2018 at 12:24:20 AM UTC+2, Vicente Munoz wrote: > > Fixing the “broken packages” issue can be a tad difficult because it can > be cause by several reasons, personal recommendation if you are doing it > through APT is to run apt install -f and see if this installs any missing > dependencies, if that’s not the case you may need to do apt-get clean, > apt-get update and apt-get upgrade to see if it fixes it or not. > > > VR, > *Vicente Muñoz* > > > > *From:* [email protected] <javascript:> <[email protected] > <javascript:>> *On Behalf Of *Jeff Dyke > *Sent:* Thursday, August 23, 2018 3:19 PM > *To:* [email protected] <javascript:> > *Subject:* [EXTERNAL] Re: [ossec-list] Install OSSEC in Ubuntu via APT > > > > > > Unless you can say what the broken packages are I'm not sure how much i > can help, i use salt to install OSSEC and my main state is simply: > > > > pkg.installed is just the equivalent of apt install ossec-hids-server > > > > *ossec-hids-server*: > *pkg.installed*: > - *require*: > - /root/ossec-debconf-answers.sh > - *require_in*: > - /root/ossec-generate-cert.sh > > where deb-conf-answers.sh contains > > > > *#!/usr/bin/env bash*HOST=*$* > > *(hostname)debconf-set-selections **<<< ossec-hids-server > *ossec-hids/email_to string root@*$*{HOST} > *debconf-set-selections **<<< ossec-hids-server *ossec-hids/email_from > string ossecm@*$*{HOST} > *debconf-set-selections **<<< ossec-hids-server > *ossec-hids/email_notification *select *yes > *debconf-set-selections **<<< ossec-hids-server *ossec-hids/smtp_server > string *$*{HOST} > > and ossec-generate-certs.sh is > > DIR=/var/ossec/etc > *openssl *genrsa -out *$*{DIR}/sslmanager.key 4096 *>/dev/null **2* > *>&1**openssl *req -new -x509 -key *$*{DIR}/sslmanager.key -out > *$*{DIR}/sslmanager.cert -days 3650 -subj > /C=US/ST=MA/L=Boston/O=Engineering/OU=Security/CN=ossec.{{pillar['network-configuration'][grains['environment']]['ossec-server-name']}}.{{ > domain }} > > > > Obviously there is some salt stuff in there, but ultimately they just return > strings. > > Everyones evironments are different, but do you know the broken packages > are, which version of ubuntu are you on? The above is used for a manager > on 16.04. I use the repo: deb > https://updates.atomicorp.com/channels/atomic/ubuntu xenial main > > On Wed, Aug 22, 2018 at 6:36 AM Dzenis Aslani <[email protected] > <javascript:>> wrote: > > Hello everyone i got problem when i try to install OSSEC from > https://www.ossec.net/downloads.html through APT. I tried both manually > and automatically,and none of them works, when i tried i got this message > "unable to correct problems you have held broken packages " > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] <javascript:>. > For more options, visit https://groups.google.com/d/optout. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] <javascript:>. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
