On Mon, Jul 13, 2020 at 10:11 AM lê danh <conme...@gmail.com> wrote: > > Hello everyone, I want to use ossec to be able to track progress on a windows > computer, follow the instructions from here > (http://santi-bassett.blogspot.com/2015/08/how-to-monitor > -running-processes-with-ossec.html). > > I did it exactly according to the instructions on the windows machine > (windows server 2012): > - In the file internal_options.conf I have converted > logcollector.remote_commands = 1 > - I also added in the file local_internal_options.conf > logcollector.remote_commands = 1 > > On OSSEC server (ossec 3.1.0) I configured the agent.conf file as follows: > > <agent_config os = "windows"> > <localfile> > <log_format> full_command </log_format> > <command> tasklist </command> > <frequency> 60 </frequency> > </localfile> > </agent_config> > > But when I verify agent.conf, the message is as follows: > > 2020/07/13 21:02:42 verify-agent-conf: Remote commands are not accepted from > the manager. Ignoring it on the agent.conf > 2020/07/13 21:02:42 verify-agent-conf (1202): ERROR: Configuration error at > '/var/ossec/etc/shared/agent.conf'. Exiting. > > Hope everyone can show me how to fix this, thank you very much >
Did you restart the ossec service on the agent? > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/2fc0eeb8-3a30-45d4-b8c4-2e0ec2b649b3o%40googlegroups.com. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAMyQvMrjBq1zMWVZbTwcn%2BUkGzG5Tesw7usy8VEW5bKA9Gtrng%40mail.gmail.com.
