On Fri, Jan 4, 2019 at 4:47 PM ram sri <ramsri13...@gmail.com> wrote:

> Thanks dan (ddpbsd)
>
> But i run pre-defined script of active response. Its only execute command
> on Ossec server(not executed in ossec-manager server also) and Ossec agent.
> Even this command
> https://ossec-docs.readthedocs.io/en/latest/manual/ar/ar-windows.html
> also not executed. Because of .cmd file not executed in Linux based server.
>

.cmd files won’t run on linux, it’s a windows script.

Every time Active Response trigger but reply was "Execute formate error".
>
> Please give me the solution and suggestion for how to shutdown windows
> machine when particular event is trigger.
>

How do you have active response configured?
Which active response command are you trying to run?
Can you check the ownership and permissions of the script?


> Thanks,
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-list+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to