[ossec-list] Re: Mysql database output

["Daniel Cid" <daniel.cid@xxxxxxxxx>]

Hi Adjete,

Very strange error. It looks like that your ossec-maild wasn't updated
during the upgrade
process. Can youtry again with the v1.4 BETA2? More information about it at:

http://www.ossec.net/dcid/?p=114

You will need to run a few commands before the ./install.sh this time:

$ cd ossec-hids-1.4
$ cd src; make setdb; cd ..
$ ./install.sh

http://www.ossec.net/wiki/index.php/Know_How:DatabaseOutput


Thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net


On 10/17/07, adjete wilson <wilsadjete@xxxxxxxxx> wrote:
> i installed 1.4 beta and i'm still getting the error. ossec will only run if
> i remove the database output entry
>
> Starting OSSEC: 2007/10/17 10:52:27 ossec-maild(1230): Invalid element in
> the configuration: 'database_output'.
> 2007/10/17 10:52:27 ossec-maild(1202): Configuration error at
> '/var/ossec/etc/ossec.conf'. Exiting.
> 2007/10/17 10:52:27 ossec-maild(1202): Configuration error at
> '/var/ossec/etc/ossec.conf'. Exiting.
>
> On 10/15/07, adjete wilson <wilsadjete@xxxxxxxxx> wrote:
> > sorry for the confusion, that was just the generic output from the manual.
> I changed it to mysql as the option in my config.
> >
> >
> >
> > On 10/14/07, Meir Michanie < meirgotroot@xxxxxxxxx> wrote:
> > >
> > > you said that you want to log to mysql while the conf you sent it says
> > > postregsql.
> > > ?
> > >
> > > On 10/13/07, Rodrigo Montoro (Sp0oKeR) <spooker@xxxxxxxxx> wrote:
> > > > Try http://www.ossec.net/dcid/?p=112
> > > >
> > > > Regards,
> > > >
> > > >
> > > > On 10/13/07, Michael Starks <ossec@xxxxxxxxxxxxxxxxx > wrote:
> > > > >
> > > > > pipo02 wrote:
> > > > > > i'm using 1.3, which i thought support that option.
> > > > >
> > > > > I don't think so.  It's not in the changelog:
> > > > > http://ossec.net/announcements/v1.3-2007-08-08.txt
> > > > >
> > > >
> > > >
> > > > --
> > > > =========================
> > > >      Rodrigo Ribeiro Montoro
> > > >       Analista de Segurança
> > > >     SnortCP / RHCE / LPIC-I
> > > >   http://spookerlabs.multiply.com
> > > > =========================
> > > >
> > >
> >
> >
> >
> > --
> > Adjete Wilson
>
>
>
> --
> Adjete Wilson