Re: [ossec-list] Windows Application and System logs

2015-05-20 Thread Daniel Wagner
Eventlog. Will try the eventchannel and report. Thank you. On Friday, May 15, 2015 at 4:52:20 AM UTC-7, dan (ddpbsd) wrote: > > On Wed, May 13, 2015 at 10:20 PM, Daniel Wagner > wrote: > > Hello all, > > > > I've installed OSSEC HIDS Agent v2.8 on a few Windows 2008R2 servers and > > Window

Re: [ossec-list] Windows Application and System logs

2015-05-20 Thread Daniel Wagner
Will try and update. Thank you. On Thursday, May 14, 2015 at 7:59:03 AM UTC-7, LostInThe Tubez wrote: > > Have you turned on logall > > > and looked in /var/ossec/logs/archives/archives.log to verify you aren’t

Re: [ossec-list] Windows Application and System logs

2015-05-15 Thread dan (ddp)
On Wed, May 13, 2015 at 10:20 PM, Daniel Wagner wrote: > Hello all, > > I've installed OSSEC HIDS Agent v2.8 on a few Windows 2008R2 servers and > Windows 2003 servers and am receiving the Security logs on my OSSEC > server, but not the Application and System logs. > > My config file is the defau

RE: [ossec-list] Windows Application and System logs

2015-05-14 Thread LostInTheTubez
Have you turned on logall and looked in /var/ossec/logs/archives/archives.log to verify you aren’t getting anything from the System and Application logs? It may be that you simply aren’t getting any entries fro