網路論壇
網路論壇
登入
網路論壇
網路論壇
ossec-list
會話群組
關於
提供意見
說明
群組路徑
ossec-list
第 1 - 30 個,共有 6998 個
全部標示為已讀取
檢舉群組
已選取 0 列
Ming
2025/8/2
rootcheck exclude directory
Hi, I have directories (/var/www/*) containing over 20 million files (inodes), and rootcheck takes
未讀,
rootcheck exclude directory
Hi, I have directories (/var/www/*) containing over 20 million files (inodes), and rootcheck takes
2025/8/2
Trevisi Roberto
,
Roberto Trevisi
2
2025/5/1
Ossec agent with static ip, server with dynamic ip does not connects outside the LAN
Hi, 0 I have this situation: _one agent inside a LAN whose default gateway has a static ip _and a
未讀,
Ossec agent with static ip, server with dynamic ip does not connects outside the LAN
Hi, 0 I have this situation: _one agent inside a LAN whose default gateway has a static ip _and a
2025/5/1
BJ Taylor
,
dan (ddp)
3
2024/12/11
Rules not firing because no decoders match
If you can't fix the timestamp being used you'll probably have to modify the source code to
未讀,
Rules not firing because no decoders match
If you can't fix the timestamp being used you'll probably have to modify the source code to
2024/12/11
Veliyappan D
2024/10/26
reagrding filebeat
Hi I need to get a filebeat logs in wazuh. Were i can get and how i can get wat need to do?
未讀,
reagrding filebeat
Hi I need to get a filebeat logs in wazuh. Were i can get and how i can get wat need to do?
2024/10/26
sparks....@gmail.com
2024/10/14
agent.conf is doesnt work
Hello, I have a problem, I am trying to configure agent.conf but considering that the configuration
未讀,
agent.conf is doesnt work
Hello, I have a problem, I am trying to configure agent.conf but considering that the configuration
2024/10/14
den
,
dan (ddp)
2
2024/9/9
Active response litterally doesn't work
I haven't looked at this stuff in a while, and I definitely haven't looked at the wazuh
未讀,
Active response litterally doesn't work
I haven't looked at this stuff in a while, and I definitely haven't looked at the wazuh
2024/9/9
conm...@gmail.com
, …
den
7
2024/9/8
ACTIVE-RESPONSE NOT WORKING
Can you guide me how to turn on active response on my ossec, mine is not even working even I added
未讀,
ACTIVE-RESPONSE NOT WORKING
Can you guide me how to turn on active response on my ossec, mine is not even working even I added
2024/9/8
Tam Pham
2024/8/15
newby question: FIM support and licensing the manager
We are thinking of installing OSSEC+ versus OSSEC Atomic for file integrity monitoring (FIM) My
未讀,
newby question: FIM support and licensing the manager
We are thinking of installing OSSEC+ versus OSSEC Atomic for file integrity monitoring (FIM) My
2024/8/15
Eric Hankins
, …
Joël Stienlet
8
2024/2/25
ossec and system updates: forcing immediate syscheck
Hello Mike, Sorry for digging this up, but a search on google lead me to this discussion. Is there
未讀,
ossec and system updates: forcing immediate syscheck
Hello Mike, Sorry for digging this up, but a search on google lead me to this discussion. Is there
2024/2/25
Satwika sree
,
dan (ddp)
2
2023/12/8
Custom logo for each agent group
Ossec doesn't show any logos. What application are you seeing logos in? On Fri, Dec 8, 2023 at 9:
未讀,
Custom logo for each agent group
Ossec doesn't show any logos. What application are you seeing logos in? On Fri, Dec 8, 2023 at 9:
2023/12/8
Dosimbek Umarov
2023/11/26
HIDs agent syslog(/var/log/mysql/mysql.log) alerts not showing in analysis/security_events but is showing in environment/detection/hids Alerts Log. How can I did that so hids alerts showing in security_events.
**Phase 1: Completed pre-decoding. full event: '023 Nov 26 16:10:49 (bd-2) 192.168.110.3->/var
未讀,
HIDs agent syslog(/var/log/mysql/mysql.log) alerts not showing in analysis/security_events but is showing in environment/detection/hids Alerts Log. How can I did that so hids alerts showing in security_events.
**Phase 1: Completed pre-decoding. full event: '023 Nov 26 16:10:49 (bd-2) 192.168.110.3->/var
2023/11/26
Secure moi
2
2023/8/21
Only Getting Rule 18107 alerts
PS change in apporach....how about a really simple example of a custom rule and decoder for server
未讀,
Only Getting Rule 18107 alerts
PS change in apporach....how about a really simple example of a custom rule and decoder for server
2023/8/21
Thavorn Vann
2023/6/16
Agents 3.7 Windows 10 never connected
Hi, I'm trying to connect from agent to server but it show error below: 2023/06/16 11:29:33 ossec
未讀,
Agents 3.7 Windows 10 never connected
Hi, I'm trying to connect from agent to server but it show error below: 2023/06/16 11:29:33 ossec
2023/6/16
hiwot
2023/6/6
how to solve this problem dears?
Siem v4.4.3 (Rev. 40409) Installation Script - https://www.siem.com You are about to start the
未讀,
how to solve this problem dears?
Siem v4.4.3 (Rev. 40409) Installation Script - https://www.siem.com You are about to start the
2023/6/6
Jeff Chimene
2023/5/3
Wordpress
I'm trying to improve ossec WordPress rules. I'd like to start a list of generic WordPress
未讀,
Wordpress
I'm trying to improve ossec WordPress rules. I'd like to start a list of generic WordPress
2023/5/3
Lãm Ngô
2
2023/4/7
hi all
Vào lúc 17:25:32 UTC+7 ngày Thứ Sáu, 7 tháng 4, 2023, Lãm Ngô đã viết: i can't login to gmail
未讀,
hi all
Vào lúc 17:25:32 UTC+7 ngày Thứ Sáu, 7 tháng 4, 2023, Lãm Ngô đã viết: i can't login to gmail
2023/4/7
Nidhi Soni
,
victor....@wazuh.com
3
2023/3/30
Detection for hidden ports
Hi, I have installed reptile rootkit and did the required configurations as given in wazuh blog:
未讀,
Detection for hidden ports
Hi, I have installed reptile rootkit and did the required configurations as given in wazuh blog:
2023/3/30
Michael Starling
2023/3/28
Rule 554 firing instead of rule 500
Hello. I'm seeing a strange issue when running some tests on rule 550 "Integrity checksum
未讀,
Rule 554 firing instead of rule 500
Hello. I'm seeing a strange issue when running some tests on rule 550 "Integrity checksum
2023/3/28
Secure moi
2
2023/1/13
Filter alerts by ID and Date
Still struggling with this....and am guessing the documentation is out there to solve it but... Q is
未讀,
Filter alerts by ID and Date
Still struggling with this....and am guessing the documentation is out there to solve it but... Q is
2023/1/13
Alex
2022/10/17
Alpine Linux installaton without systemd
I want to install Ossec Server on Alpine Linux following the instructions on the homepage for the
未讀,
Alpine Linux installaton without systemd
I want to install Ossec Server on Alpine Linux following the instructions on the homepage for the
2022/10/17
Peter P
2022/10/13
Agents 3.6 Centos 7 never connected
Hi, I'm trying to troubleshoot not connecting OSSEC agents 3.6 running on Centos 7, with a Server
未讀,
Agents 3.6 Centos 7 never connected
Hi, I'm trying to troubleshoot not connecting OSSEC agents 3.6 running on Centos 7, with a Server
2022/10/13
Bhaskar Patel
2022/10/9
want to enable 2fector on the wazuh-indexer console
"I need to enable 2fector on the wazuh-indexer console is it possible? Does anyone have an idea
未讀,
want to enable 2fector on the wazuh-indexer console
"I need to enable 2fector on the wazuh-indexer console is it possible? Does anyone have an idea
2022/10/9
Michael Gaffney
2022/10/6
Agents will not Connect to server
Hello, I am having trouble getting my agents to talk to the server. I keep getting the following
未讀,
Agents will not Connect to server
Hello, I am having trouble getting my agents to talk to the server. I keep getting the following
2022/10/6
Kristian Kirilov
,
victor....@wazuh.com
2
2022/10/3
Is there a way to use nodiff with folders?
Hello kristian, The nodiff the option is aimed to avoid data leaking by sending the content of
未讀,
Is there a way to use nodiff with folders?
Hello kristian, The nodiff the option is aimed to avoid data leaking by sending the content of
2022/10/3
sparks....@gmail.com
2022/8/2
Agentless Suspend alerts during system updates
Hello good day, to ask for your help. I have version 3.7 of OSSEC installed where I only work with
未讀,
Agentless Suspend alerts during system updates
Hello good day, to ask for your help. I have version 3.7 of OSSEC installed where I only work with
2022/8/2
ABHISHEKH LADE
,
Daniel Cid
2
2022/7/30
ossec 3.6 configration
What errors are you getting when you try to install? If you can give more details, maybe we will be
未讀,
ossec 3.6 configration
What errors are you getting when you try to install? If you can give more details, maybe we will be
2022/7/30
M Asif
,
dan (ddp)
2
2022/7/15
Install ossec in windows as standalone (local mode)
That's not supported. Windows is an agent only platform. On Tue, Jul 12, 2022 at 1:34 PM M Asif
未讀,
Install ossec in windows as standalone (local mode)
That's not supported. Windows is an agent only platform. On Tue, Jul 12, 2022 at 1:34 PM M Asif
2022/7/15
tater bug
2022/6/27
When unexpected happens. After try many fixes multiple times, then send an e-mail to one of our mailing lists with the following information:
root-laptop:/var/ossec/logs# /var/ossec/bin# cat /etc/ossec-init.conf -bash: /var/ossec/bin#: No such
未讀,
When unexpected happens. After try many fixes multiple times, then send an e-mail to one of our mailing lists with the following information:
root-laptop:/var/ossec/logs# /var/ossec/bin# cat /etc/ossec-init.conf -bash: /var/ossec/bin#: No such
2022/6/27
Annie s
, …
Paterson Lali
8
2022/6/10
windows AR not working
Hi, I was able to generate wrong password events after editing the audit policies of windows. log all
未讀,
windows AR not working
Hi, I was able to generate wrong password events after editing the audit policies of windows. log all
2022/6/10
JP H
,
Alejandro Ruiz Gonzalez
3
2022/5/5
Report limit on specific servers
Thank you, I was able to figure out what I needed based on the information in that link. J On
未讀,
Report limit on specific servers
Thank you, I was able to figure out what I needed based on the information in that link. J On
2022/5/5