Re: [ossec-list] Newby question

2017-08-22 Thread Leroy Tennison
Thank you for your reply, sadly, that's exactly what I've done (doubled up). I'll go fix that. Correct me if I'm wrong but, from your reply, it appears that I need to examine both the manager's agent.conf as well as the agent's ossec.conf to determine the "effective" configuration. On Monda

Re: [ossec-list] Is a "percent change" criteria available?

2017-08-22 Thread Leroy Tennison
Nagios..., we happen to use Icinga, I'll look at that approach. Thanks (again). On Monday, August 21, 2017 at 5:42:30 PM UTC-5, dan (ddpbsd) wrote: > > > > On Aug 21, 2017 4:58 PM, "Leroy Tennison" > wrote: > > I'm hoping to implement a constraint where, if disk space used (on a > specific tre

Re: [ossec-list] Newby question

2017-08-22 Thread dan (ddp)
On Aug 22, 2017 11:55 AM, "Leroy Tennison" wrote: Thank you for your reply, sadly, that's exactly what I've done (doubled up). I'll go fix that. Correct me if I'm wrong but, from your reply, it appears that I need to examine both the manager's agent.conf as well as the agent's ossec.conf to det

Re: [ossec-list] Newby question

2017-08-22 Thread Leroy Tennison
Hopefully final question about this, I notice the default manager's agent.conf has a configuration simply for os="linux" (and windows) as well as one which has no qualifier, I'm assuming those configurations apply to all systems with that os and all systems respectively. Correct? Suggestion,

Re: [ossec-list] Newby question

2017-08-22 Thread dan (ddp)
On Aug 22, 2017 12:52 PM, "Leroy Tennison" wrote: Hopefully final question about this, I notice the default manager's agent.conf has a configuration simply for os="linux" (and windows) as well as one which has no qualifier, I'm assuming those configurations apply to all systems with that os and a

[ossec-list] OSSEC windows agent disabling

2017-08-22 Thread guizarea
I have about 25 OSSEC clients (v2.9.0) in my environment. Over half of them, the client will show under the ~OSSEC Windows Agent Manger~ “No Information Available”. If I try to start the agent, it says “unable to start agent (check config). The services are started, I can stop and start t

Re: [ossec-list] OSSEC windows agent disabling

2017-08-22 Thread dan (ddp)
On Aug 22, 2017 5:26 PM, wrote: I have about 25 OSSEC clients (v2.9.0) in my environment. Over half of them, the client will show under the ~OSSEC Windows Agent Manger~ “No Information Available”. If I try to start the agent, it says “unable to start agent (check config). The services are star