Hi Hui, Yes, there is multiple ways to troubleshoot it. First look at your logs ( /var/ossec/logs/ossec.log ). Second, make sure that ossec is still running and generating alerts... There is also an entry in the wiki that may be helpful: http://www.ossec.net/wiki/index.php/Know_How:Mail_Config If none of this works, send us the following information: http://www.ossec.net/wiki/index.php/Community_manual:BugReport Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On 9/14/06, Hui Sun <hsun@xxxxxxxx> wrote:
Hi, We are testing the ossec now, after installation in server in local mode, ossec send alerts for few days, and then event alert generated in log file, but we can't receive it anymore. How can we troubleshoot this problem? Thanks!