Groups
Sign in
Groups
ossec-list
Conversations
About
Send feedback
Help
ossec-list
Contact the owners and managers
1–30 of 6991
Mark all as read
Report group
0 selected
Eric Hankins
, …
Joël Stienlet
8
25 Feb
ossec and system updates: forcing immediate syscheck
Hello Mike, Sorry for digging this up, but a search on google lead me to this discussion. Is there
unread,
ossec and system updates: forcing immediate syscheck
Hello Mike, Sorry for digging this up, but a search on google lead me to this discussion. Is there
25 Feb
Satwika sree
,
dan (ddp)
2
08/12/2023
Custom logo for each agent group
Ossec doesn't show any logos. What application are you seeing logos in? On Fri, Dec 8, 2023 at 9:
unread,
Custom logo for each agent group
Ossec doesn't show any logos. What application are you seeing logos in? On Fri, Dec 8, 2023 at 9:
08/12/2023
Dosimbek Umarov
26/11/2023
HIDs agent syslog(/var/log/mysql/mysql.log) alerts not showing in analysis/security_events but is showing in environment/detection/hids Alerts Log. How can I did that so hids alerts showing in security_events.
**Phase 1: Completed pre-decoding. full event: '023 Nov 26 16:10:49 (bd-2) 192.168.110.3->/var
unread,
HIDs agent syslog(/var/log/mysql/mysql.log) alerts not showing in analysis/security_events but is showing in environment/detection/hids Alerts Log. How can I did that so hids alerts showing in security_events.
**Phase 1: Completed pre-decoding. full event: '023 Nov 26 16:10:49 (bd-2) 192.168.110.3->/var
26/11/2023
Secure moi
2
21/08/2023
Only Getting Rule 18107 alerts
PS change in apporach....how about a really simple example of a custom rule and decoder for server
unread,
Only Getting Rule 18107 alerts
PS change in apporach....how about a really simple example of a custom rule and decoder for server
21/08/2023
Thavorn Vann
16/06/2023
Agents 3.7 Windows 10 never connected
Hi, I'm trying to connect from agent to server but it show error below: 2023/06/16 11:29:33 ossec
unread,
Agents 3.7 Windows 10 never connected
Hi, I'm trying to connect from agent to server but it show error below: 2023/06/16 11:29:33 ossec
16/06/2023
hiwot
06/06/2023
how to solve this problem dears?
Siem v4.4.3 (Rev. 40409) Installation Script - https://www.siem.com You are about to start the
unread,
how to solve this problem dears?
Siem v4.4.3 (Rev. 40409) Installation Script - https://www.siem.com You are about to start the
06/06/2023
Jeff Chimene
03/05/2023
Wordpress
I'm trying to improve ossec WordPress rules. I'd like to start a list of generic WordPress
unread,
Wordpress
I'm trying to improve ossec WordPress rules. I'd like to start a list of generic WordPress
03/05/2023
Lãm Ngô
2
07/04/2023
hi all
Vào lúc 17:25:32 UTC+7 ngày Thứ Sáu, 7 tháng 4, 2023, Lãm Ngô đã viết: i can't login to gmail
unread,
hi all
Vào lúc 17:25:32 UTC+7 ngày Thứ Sáu, 7 tháng 4, 2023, Lãm Ngô đã viết: i can't login to gmail
07/04/2023
Nidhi Soni
,
victor....@wazuh.com
3
30/03/2023
Detection for hidden ports
Hi, I have installed reptile rootkit and did the required configurations as given in wazuh blog:
unread,
Detection for hidden ports
Hi, I have installed reptile rootkit and did the required configurations as given in wazuh blog:
30/03/2023
Michael Starling
28/03/2023
Rule 554 firing instead of rule 500
Hello. I'm seeing a strange issue when running some tests on rule 550 "Integrity checksum
unread,
Rule 554 firing instead of rule 500
Hello. I'm seeing a strange issue when running some tests on rule 550 "Integrity checksum
28/03/2023
Secure moi
2
13/01/2023
Filter alerts by ID and Date
Still struggling with this....and am guessing the documentation is out there to solve it but... Q is
unread,
Filter alerts by ID and Date
Still struggling with this....and am guessing the documentation is out there to solve it but... Q is
13/01/2023
Alex
17/10/2022
Alpine Linux installaton without systemd
I want to install Ossec Server on Alpine Linux following the instructions on the homepage for the
unread,
Alpine Linux installaton without systemd
I want to install Ossec Server on Alpine Linux following the instructions on the homepage for the
17/10/2022
Peter P
13/10/2022
Agents 3.6 Centos 7 never connected
Hi, I'm trying to troubleshoot not connecting OSSEC agents 3.6 running on Centos 7, with a Server
unread,
Agents 3.6 Centos 7 never connected
Hi, I'm trying to troubleshoot not connecting OSSEC agents 3.6 running on Centos 7, with a Server
13/10/2022
Bhaskar Patel
09/10/2022
want to enable 2fector on the wazuh-indexer console
"I need to enable 2fector on the wazuh-indexer console is it possible? Does anyone have an idea
unread,
want to enable 2fector on the wazuh-indexer console
"I need to enable 2fector on the wazuh-indexer console is it possible? Does anyone have an idea
09/10/2022
Michael Gaffney
06/10/2022
Agents will not Connect to server
Hello, I am having trouble getting my agents to talk to the server. I keep getting the following
unread,
Agents will not Connect to server
Hello, I am having trouble getting my agents to talk to the server. I keep getting the following
06/10/2022
Kristian Kirilov
,
victor....@wazuh.com
2
03/10/2022
Is there a way to use nodiff with folders?
Hello kristian, The nodiff the option is aimed to avoid data leaking by sending the content of
unread,
Is there a way to use nodiff with folders?
Hello kristian, The nodiff the option is aimed to avoid data leaking by sending the content of
03/10/2022
sparks....@gmail.com
02/08/2022
Agentless Suspend alerts during system updates
Hello good day, to ask for your help. I have version 3.7 of OSSEC installed where I only work with
unread,
Agentless Suspend alerts during system updates
Hello good day, to ask for your help. I have version 3.7 of OSSEC installed where I only work with
02/08/2022
ABHISHEKH LADE
,
Daniel Cid
2
30/07/2022
ossec 3.6 configration
What errors are you getting when you try to install? If you can give more details, maybe we will be
unread,
ossec 3.6 configration
What errors are you getting when you try to install? If you can give more details, maybe we will be
30/07/2022
M Asif
,
dan (ddp)
2
15/07/2022
Install ossec in windows as standalone (local mode)
That's not supported. Windows is an agent only platform. On Tue, Jul 12, 2022 at 1:34 PM M Asif
unread,
Install ossec in windows as standalone (local mode)
That's not supported. Windows is an agent only platform. On Tue, Jul 12, 2022 at 1:34 PM M Asif
15/07/2022
tater bug
27/06/2022
When unexpected happens. After try many fixes multiple times, then send an e-mail to one of our mailing lists with the following information:
root-laptop:/var/ossec/logs# /var/ossec/bin# cat /etc/ossec-init.conf -bash: /var/ossec/bin#: No such
unread,
When unexpected happens. After try many fixes multiple times, then send an e-mail to one of our mailing lists with the following information:
root-laptop:/var/ossec/logs# /var/ossec/bin# cat /etc/ossec-init.conf -bash: /var/ossec/bin#: No such
27/06/2022
Annie s
, …
Paterson Lali
8
10/06/2022
windows AR not working
Hi, I was able to generate wrong password events after editing the audit policies of windows. log all
unread,
windows AR not working
Hi, I was able to generate wrong password events after editing the audit policies of windows. log all
10/06/2022
JP H
,
Alejandro Ruiz Gonzalez
3
05/05/2022
Report limit on specific servers
Thank you, I was able to figure out what I needed based on the information in that link. J On
unread,
Report limit on specific servers
Thank you, I was able to figure out what I needed based on the information in that link. J On
05/05/2022
Miguel Jacq
,
Yana Zaeva
6
23/03/2022
Issues getting web rules to detect an Nginx log when it's come in via syslog
Sorry to resurrect an old thread, but I finally got my local decoders to work with Nginx logs when
unread,
Issues getting web rules to detect an Nginx log when it's come in via syslog
Sorry to resurrect an old thread, but I finally got my local decoders to work with Nginx logs when
23/03/2022
Vũ Đạt
19/03/2022
Re: [ossec-list] Agent cannot conect to failover server
what ? Vào Th 3, 15 thg 3, 2022 vào lúc 01:42 '(K14 HCM), Nguyen Hoang Phu' via ossec-list
unread,
Re: [ossec-list] Agent cannot conect to failover server
what ? Vào Th 3, 15 thg 3, 2022 vào lúc 01:42 '(K14 HCM), Nguyen Hoang Phu' via ossec-list
19/03/2022
Kyriakos Stavridis
,
Yana Zaeva
2
10/03/2022
About new OSSEC's dynamic decoders
Hi Kyriakos, It seems that this feature is not available for OSSEC (you can check an older thread
unread,
About new OSSEC's dynamic decoders
Hi Kyriakos, It seems that this feature is not available for OSSEC (you can check an older thread
10/03/2022
AKSHA GANDHI
,
Manuel Camona Perez
7
04/03/2022
Active response not working with rule_id 554 with "filename" as expect
Hi again and sorry for the late response, In the last comment I posted, I showed you an example where
unread,
Active response not working with rule_id 554 with "filename" as expect
Hi again and sorry for the late response, In the last comment I posted, I showed you an example where
04/03/2022
Khoa Phạm Anh
,
Yana Zaeva
2
03/03/2022
HELP ME DECODE THIS LOG (check Authen)
Hi, My apologies for the late response. You could start creating decoders following this example:
unread,
HELP ME DECODE THIS LOG (check Authen)
Hi, My apologies for the late response. You could start creating decoders following this example:
03/03/2022
AKSHA GANDHI
25/02/2022
Active response not working with rule_id 554 with "filename" as expect
Hi, Below are the details of the issue being faced: 1. Active response is getting triggered for both
unread,
Active response not working with rule_id 554 with "filename" as expect
Hi, Below are the details of the issue being faced: 1. Active response is getting triggered for both
25/02/2022
Rakesh Kumar
25/02/2022
ossec configuration
Hi Folks, I have installed the ossec using yocto in the board. .Currently i am using the ossec
unread,
ossec configuration
Hi Folks, I have installed the ossec using yocto in the board. .Currently i am using the ossec
25/02/2022
Pruthvi Raj
, …
Vũ Đạt
3
21/02/2022
How to configure OSSEC-window & Linux agents
thanks Vào Th 6, 4 thg 2, 2022 vào lúc 15:59 Yana Zaeva <yana....@wazuh.com> đã viết: Hi
unread,
How to configure OSSEC-window & Linux agents
thanks Vào Th 6, 4 thg 2, 2022 vào lúc 15:59 Yana Zaeva <yana....@wazuh.com> đã viết: Hi
21/02/2022