Ossec connecting to Prelude Manager Server on remote computer
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <8da1212305144298f071a238f22d675c@localhost> |
I am having issues running OSSEC and having it connect to the Prelude Manager Server on a different server. Everytime i start OSSEC i get: 03 Mar 12:24:38 (process:30147) INFO: Connecting to 127.0.0.1:4690 prelude Manager server. 03 Mar 12:24:38 (process:30147) WARNING: Failover enabled: connection error with 127.0.0.1:4690: Connection refused I did find a post on the mailing list here: http://www.prelude-ids.org/pipermail/prelude-user/2007-October/002219.html It says that I need to change the server-addr in /etc/prelude/default/client.conf, which I have, and OSSEC still only trys to connect to 127.0.0.1. I have gone as far as deleting EVERYTHING realted to Ossec, re-downloaded it, re-installed and it still only ever trys to connect to 127.0.0.1. I will note that prelude-lml seems to be looking at the server-addr, but OSSEC just dosn't want to :( What am I doing wrong? Thanks! Jeremy _______________________________________________ Prelude-user site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-user