Hi, i have a test setup with a windows agent and a server CentOS.
I wrote a .bat to install agent and it seems ok, but looking at the logs it only says
2017/11/14 11:14:27 ossec-agentd(4101): WARN: Waiting for server reply (not started). Tried: 'serverhost.stuff'.
2017/11/14 11:15:05 ossec-agentd: INFO: Trying to connect to server serverhost.stuff, port 1514.
2017/11/14 11:15:05 INFO: Connected to serverhost.stuff at address 10.10.x.y:1514, port 1514
2017/11/14 11:15:26 ossec-agentd(4101): WARN: Waiting for server reply (not started). Tried: 'serverhost.stuff'.
2017/11/14 11:16:22 ossec-agentd: INFO: Trying to connect to server serverhost.stuff, port 1514.
2017/11/14 11:16:22 INFO: Connected to serverhost.stuff at address 10.10.x.y:1514, port 1514
2017/11/14 11:16:43 ossec-agentd(4101): WARN: Waiting for server reply (not started). Tried: 'serverhost.stuff'.
2017/11/14 11:17:57 ossec-agentd: INFO: Trying to connect to server sep0265cb.sep.local, port 1514.
2017/11/14 11:17:57 INFO: Connected to serverhost.stuff at address 10.10.x.y:1514, port 1514
It goes forever! It means it is working? May i change some value of time between keep alive messages?
Also im receiving errors with agent.conf that i already saw in other posts.
ERROR: Error reading XML file 'shared/agent.conf': XMLERR: File 'shared/agent.conf' not found. (line 16).
Im convinved i have a connection issue or udp cache stuff. But cant figure out.
All this together can be a connection issue? Or misconfiguration?