Just a guess, but chown ossecr /var/ossec/etc/shared/merged.mg
The following message made me notice that:
2011/06/07 10:19:52 ossec-remoted: ERROR: Unable to create merged
file: '/etc/shared/merged.mg'.
11 hours is too long, it shouldn't take more than a couple.
On Tue, Jun 7, 2011 at 11:26 AM,
I've combed through the other posts on agent.conf, and have done all
the troubleshooting I could find on why this isn't working. The
agent.conf file is not being copied to the clients. I'm running OSSEC
2.5.1 on all clients and server.
Last night ( about 11 hours ago) I added an agent.conf to my