Re: No alerts in Prewikka
Robert Vineyard <[email protected]> Fri, 20 Nov 2009 14:59:12 -0500
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
I figured out the problem here too. I did not have my prelude-manager address configured in the prewikka config file, and I did not have a "prewikka" profile registered with the prelude-manager. Overall, a very confusing process, but I seem to be up and running now. -- [ Robert Vineyard | RHCE, Security+ ] [ [email protected] ] [ Information Security Engineer III ] [ 404.385.6900 | FAX 404.894.4690 ] [Finding a needle in a haystack isn't hard when every straw is computerized] Robert Vineyard wrote: > I think I've finally got my Prelude setup mostly up and running. I've > verified that there are a bunch of snort alerts in the prelude database, and > both postgres and prelude-manager see quite a spike in utilization when I > fire up my snort sensors. > > The problem is, now that I've got Prewikka (actually PrewikkaPro) hooked up, > it is able to see my snort agents but does not display any events coming out > of them. Did I miss something in the Prewikka setup? > > Thanks! > _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user