I installed on Ubuntu 18.04 with according to this: https://www.ossec.net/downloads/#apt-automated-installation-on-ubuntu-and-debian
I installed both agent and server. Specifically: $ wget -q -O - https://updates.atomicorp.com/installers/atomic | sudo bash $ sudo apt update $ sudo apt install ossec-hids-server $ sudo apt install ossec-hids-agent $ sudo -u ossec ssh-keygen $ sudo vim /var/ossec/etc/client.keys 001 server1 any <some-passphrase-you-save-in-keepass> $ sudo chown root.ossec /var/ossec/etc/client.keys Then I edited ossec.conf as I wrote in my previous mail and started the server. $ sudo /var/ossec/bin/ossec-control start Starting OSSEC HIDS v3.6.0... Started ossec-execd... 2020/03/30 14:05:04 ossec-agentd: INFO: Using notify time: 600 and max time to reconnect: 1800 2020/03/30 14:05:04 going daemon Started ossec-agentd... Started ossec-logcollector... Started ossec-syscheckd... Completed. On Monday, March 30, 2020 at 2:01:35 PM UTC-4, dan (ddpbsd) wrote: > > On Mon, Mar 30, 2020 at 2:00 PM Glen Peterson <glen.k...@gmail.com > <javascript:>> wrote: > > > > Sorry to be dense. I just tried to post another message and don't see > it in google groups. I'm noticing that other people have an ossec-maild, > but I don't: > > $ sudo ls -l /var/ossec/bin/ > > total 1164 > > -r-xr-x--- 1 root ossec 149632 Mar 15 15:02 agent-auth > > -r-xr-x--- 1 root ossec 153728 Mar 15 15:02 manage_agents > > -r-xr-x--- 1 root ossec 276704 Mar 15 15:02 ossec-agentd > > -r-xr-x--- 1 root ossec 4593 Feb 14 14:46 ossec-control > > -r-xr-x--- 1 root ossec 63504 Mar 15 15:02 ossec-execd > > -r-xr-x--- 1 root ossec 235840 Mar 15 15:02 ossec-logcollector > > -r-xr-x--- 1 root ossec 284864 Mar 15 15:02 ossec-syscheckd > > -r-xr-x--- 1 root ossec 4503 Feb 14 14:46 util.sh > > > > I just installed ossec for the first time over the weekend. I can't > seem to get it to send mail. Am I missing an executable? > > > > This looks like an agent installation. The OSSEC server handles > sending out email. > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to ossec...@googlegroups.com <javascript:>. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/3d55b1e6-ae3d-4030-9cf2-30872ea7557f%40googlegroups.com. > > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/15f1956a-8065-4e5e-9dae-c428cb7f02e7%40googlegroups.com.
