Maybe I hit a small config bug here. I installed 0.9.1-a which
defaults all under /var/ossec:2006/09/05 16:11:00 ossec-remoted(1402): Authentication key file '/etc/client.keys' not found. This was generated when one of my agent installs tried to authenticate, I believe. I also noticed this: 2006/09/05 16:10:59 ossec-remoted(1501): No IP or network allowed in the access list for syslog. No reason for running it. Exiting. So it seems something got missed during the initial config... or did I miss something. Thanks. |