From: Сеньков Н. В. <n.s...@ze...> - 2018-11-15 17:06:50
|
Hello, colleagues. HIDS Control is display - HIDS service is DOWN. The try to start service don't change status service. Ossec server log: 2018/11/15 13:53:50 ossec-remoted(1213): WARN: Message from '172.20.75.104' not allowed. 2018/11/15 13:53:53 ossec-testrule: INFO: Reading decoder file alienvault/decoders/decoder.xml. 2018/11/15 13:53:53 ossec-testrule: INFO: Started (pid: 7290). 2018/11/15 13:53:53 ossec-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2018/11/15 13:53:53 ossec-maild: INFO: E-Mail notification disabled. Clean Exit. 2018/11/15 13:53:53 ossec-execd(1350): INFO: Active response disabled. Exiting. 2018/11/15 13:53:53 ossec-syscheckd(1701): WARN: No option provided for directories: '/etc,/usr/bin,/usr/sbin', ignoring it. 2018/11/15 13:53:53 ossec-syscheckd(1202): ERROR: Configuration error at '/var/ossec/etc/ossec.conf'. Exiting. 2018/11/15 13:53:53 ossec-syscheckd(1202): ERROR: Configuration error at '/var/ossec/etc/ossec.conf'. Exiting. Best regard, Nikolay Senkov |