Re: [ossec-list] Duplicate rule error

Sorry Dan, I'm horribly new to managing ossec (yesterday). How would I know that? On Wednesday, April 4, 2018 at 6:54:14 PM UTC-6, dan (ddpbsd) wrote: > > > > On Wed, Apr 4, 2018, 8:50 PM Cooper > > wrote: > >> When trying to start our new 2.9.3 ossec server, i receive the following >> error:

Re: [ossec-list] Duplicate rule error

On Wed, Apr 4, 2018, 8:50 PM Cooper wrote: > When trying to start our new 2.9.3 ossec server, i receive the following > error: > > 2018/04/04 19:45:39 ossec-analysisd: Duplicate rule ID:2501 > 2018/04/04 19:45:39 ossec-testrule(1220): ERROR: Error loading the rules: > 'local_rules.xml'. > > Howev

[ossec-list] Duplicate rule error

When trying to start our new 2.9.3 ossec server, i receive the following error: 2018/04/04 19:45:39 ossec-analysisd: Duplicate rule ID:2501 2018/04/04 19:45:39 ossec-testrule(1220): ERROR: Error loading the rules: 'local_rules.xml'. However, inside local_rules, there's only one rule with an ID

[ossec-list] agent_control all agents

Wondering if there is a way to use agent_control via cmd line to send active response to all agents manually. What i use for the single agent commands /var/ossec/bin/agent_control -b 74.34.56.78 -f win_nullroute120 001 -- --- You received this message because you are subscribed to the Goog