On Fri, Jan 4, 2019 at 4:47 PM ram sri <ramsri13...@gmail.com> wrote:
> Thanks dan (ddpbsd) > > But i run pre-defined script of active response. Its only execute command > on Ossec server(not executed in ossec-manager server also) and Ossec agent. > Even this command > https://ossec-docs.readthedocs.io/en/latest/manual/ar/ar-windows.html > also not executed. Because of .cmd file not executed in Linux based server. > .cmd files won’t run on linux, it’s a windows script. Every time Active Response trigger but reply was "Execute formate error". > > Please give me the solution and suggestion for how to shutdown windows > machine when particular event is trigger. > How do you have active response configured? Which active response command are you trying to run? Can you check the ownership and permissions of the script? > Thanks, > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.