Agent status is listed as "Never connected", but I get alerts?

15 views
Skip to first unread message

Kevin Kelly

unread,
Jun 26, 2014, 5:25:53 PM6/26/14
to ossec...@googlegroups.com
Just started when I upgraded the server to 2.8 and upgraded my 1st agent to 2.8 on Windows 2008 R2.

--
Kevin Kelly
Director, Network Technology
Whitman College

dan (ddp)

unread,
Jun 30, 2014, 12:42:33 PM6/30/14
to ossec...@googlegroups.com
On Thu, Jun 26, 2014 at 5:17 PM, Kevin Kelly <ke...@whitman.edu> wrote:
> Just started when I upgraded the server to 2.8 and upgraded my 1st agent to
> 2.8 on Windows 2008 R2.
>

It can happen. There's a status file for the agents on the manager in
/var/ossec/queue somewhere. Try stopping the agent and manager,
deleting that file, starting the manager, and finally starting the
agent.

> --
> Kevin Kelly
> Director, Network Technology
> Whitman College
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-list+...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
Reply all
Reply to author
Forward
0 new messages