I have OSSEC installed on two Fedora VMs, they are both running and communicating, but the web UI doesn't seem to be detecting anything. Not the agent, not any events, etc. I followed the instructions you provided here as best I could (some things are a bit different due to using Fedora). Do you have any suggestions or insight as to why this could be happening?
@@salsaamaliaputri-saphire-u7764 ossec-wui, I did find a solution though. Apparently the archaic ossec-wui code is not supported by the latest php version. I installed an older version of php and now the wui works
Cannot connect the server for update - oum update return ERROR: request returned HTTP error code 401 [Username/Password Invalid] - Yes the password and username are correct
This issue was discussed in this OSSEC forum post: support.atomicorp.com/hc/en-us/articles/1260803840869-OSSEC-ERROR-request-returned-HTTP-error-code-401-Username-Password-Invalid Does the issue persist after you have attempted to reconfigure your username/password, and are you directly copy-pasting or attempting to manually enter your password?
You will use the IP address of the system being monitored by the agent you have installed. Whereas a client would make requests of a server, the agent sends data back to the server to which it reports. This would be confirmed within your Window's Network & Internet settings
@@AkamaiDeveloper thanks in advance, ive a problem with ossec web interface it doesnt show anything on its page just the header, what should i do to make the web interface shows our log activity like that 19:58?
If the web ui is only showing the headers, it may be because you do not have the agent configured correctly. We suggest double checking your agent configurations. Additionally, you can ask your question on the OSSEC community forums since the folks there will have more direct experience with the service itself: forums.atomicorp.com/
