Hi Eddi Bento, I'm experiencing the same issue, i assume. In windows, there currently is a bug that prevents a 'client-server' model as the md5 checksum fails due to End-Of-Line conversion errors. See (https://github.com/ossec/ossec-hids/pull/1207) To resolve this, either wait for the fix mentioned in issue 1207, or compile it yourself with the fix included.
Coincidentally, i myself am also waiting for a new release, mainly for this issue. Hopefully i've provided some help. Sincerely, Mark Op donderdag 2 november 2017 22:01:23 UTC+1 schreef Eddi Bento: > > Hello. > > I'm trying to set up a proof of concept for OSSEC. It's all set up and > monitoring a few computers, but I can't seem to get the agent.conf file to > push. Originally, I was told to copy the ossec.conf file on the Manager > and remove the Global entries on it. Since then, I've completely killed > the file and created an empty agent.conf that has the following: > > <agent_config name="agent01"> > <localfile> > <location>C:\OSSEC-Test\something.log</location> > <log_format>syslog</log_format> > </localfile> > </agent_config> > > This is only line as I want to get this one file monitored first before I > continue. I save this file and restart OSSEC. > > When I run: > > agent_control -i 002 > > (where 002 is the AgentID for agent01) > > ..it never updates the MD5 Checksum of this file next to Client Version: > OSSEC HIDS v2.9.2 > > Does anyone have an idea on what I'm doing wrong? Is there an place where > I can see in the log that the agent.conf push fails? > > Regards, > Eddi > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
