you need to add the client on the server side with the appropriate command > On 8 Jan 2020, at 22:29, agsossec <[email protected]> wrote: > > > Hello, > We am setting up a test OSSEC server and agent -- both on AWS Linux > On both we > ran, sudo wget https://www.atomicorp.com/installers/atomic && sudo chmod +x > atomic && sudo ./atomic > saved a copy of the agent config -- /var/ossec/etc/ossec-agent.conf > /var/ossec/etc/ossec-agent.conf.orig > edited the agent config > removed the example line > changed the server IP our our OSSEC server IP > restarted the OSSEC services > At first we received an error, saying that the system was failing upon not > finding the default server IP address -- which was only in the saved copy of > the Agent config file. > When we deleted that file, and restarted the service, we now get the error... > > ossec-agentd(4105): ERROR: No valid server IP found. > ossec-agentd(1215): ERROR: No client configured. Exiting. > > In the file = /var/ossec/etc/ossec-agent.conf > > > <ossec_config> > <client> > <server-ip>10.1.252.41</server-ip> > </client> > > In the logs, we see... > > 2020/01/08 11:49:37 ossec-execd(1314): INFO: Shutdown received. Deleting > responses. > 2020/01/08 11:49:37 ossec-execd(1225): INFO: SIGNAL [(15)-(Terminated)] > Received. Exit Cleaning... > 2020/01/08 11:49:38 ossec-agentd(4105): ERROR: No valid server IP found. > 2020/01/08 11:49:38 ossec-execd: INFO: Started (pid: 3326). > 2020/01/08 11:49:38 ossec-agentd(1215): ERROR: No client configured. Exiting. > > What are doing wrong? > Thank you! > > > > > > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/7dbb8b68-6c70-461b-a2b3-9a9ca901eb9c%40googlegroups.com.
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/11C851B0-297F-4599-894D-7AC6BD22F30F%40gmail.com.
