On Sat, Jan 5, 2019 at 11:39 AM ram sri <ramsri13...@gmail.com> wrote: > > On Saturday, January 5, 2019 at 9:57:22 PM UTC+5:30, dan (ddpbsd) wrote: > > Is active response enabled on the windows agent? Were the ossec processes > > restarted after enabling it? > > Anything in the ossec.log on the agent or server? > > > > > "ossec-execd(1312): ERROR: Error executing > '/var/ossec/active-response/bin/restart-agent.cmd': Exec format error" this > error would logged in ossec.log. i asking one question to you. I know active > response is support to windows agent but active response support for windows > machine? > Give solution for my question >
I'm having trouble finding out anything about "Exec format error" related to Windows. Most of the results are about Linux or the Linux subsystem for Windows. Did you make any changes to `restart-agent.cmd`? Can you run it locally? Does anything get logged to active-responses.log? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
