OSSEC is not running

Posted by batman on Server Fault See other posts from Server Fault or by batman
Published on 2012-08-28T06:57:55Z Indexed on 2012/08/28 9:40 UTC
Read the original article Hit count: 281

Filed under:
|
|
|

I have an two ec2 instances. In one I have installed ossec server and in other I have installed ossec agent.

Here are my server config INBOUND (security group/firewall) :

port:514   source:0.0.0.0/0
port:1514   source:0.0.0.0/0

But it seems to be not working. In my agent log file I keep on getting:

2012/08/28 06:52:52 ossec-agentd: INFO: Using IPv4 for: x.x.x.x.x.x .
2012/08/28 06:53:13 ossec-agentd(4101): WARN: Waiting for server reply (not started). Tried: 'x.x.x.x.x'.

Edit:

Running sudo netstat --inet -nlp | grep ossec. I'm getting:

udp        0      0 0.0.0.0:1514            0.0.0.0:*                           26027/ossec-remoted

Where I'm making the mistake?

© Server Fault or respective owner

Related posts about ubuntu

Related posts about amazon-ec2