OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
-- Logs begin at Fri 2024-05-24 10:40:01 EDT. --
May 24 10:40:08 node1 env[1320]: Started wazuh-agentd...
May 24 10:40:08 node1 env[1320]: 2024/05/24 10:40:08 wazuh-syscheckd: ERROR: (1230): Invalid element in the configuration: 'wodle'.
May 24 10:40:08 node1 env[1320]: 2024/05/24 10:40:08 wazuh-syscheckd: ERROR: (1230): Invalid element in the configuration: 'wodle'.
May 24 10:40:09 node1 env[1320]: Started wazuh-syscheckd...
May 24 10:40:09 node1 env[1320]: 2024/05/24 10:40:09 wazuh-logcollector: ERROR: (1230): Invalid element in the configuration: 'wodle'.
May 24 10:40:10 node1 env[1320]: Started wazuh-logcollector...
May 24 10:40:10 node1 env[1320]: 2024/05/24 10:40:10 wazuh-modulesd: ERROR: (1230): Invalid element in the configuration: 'wodle'.
May 24 10:40:13 node1 env[1320]: Started wazuh-modulesd...
ossec.conf.txt
May 24 10:40:15 node1 env[1320]: Completed.
May 24 10:40:15 node1 systemd[1]: Started Wazuh agent.
Here is the configuration file. Let me know if anything seems missing here.
Here are the logs from the wazuh-agent
-- Logs begin at Fri 2024-05-24 10:40:01 EDT. -- May 24 10:40:08 node1 env[1320]: Started wazuh-agentd... May 24 10:40:08 node1 env[1320]: 2024/05/24 10:40:08 wazuh-syscheckd: ERROR: (1230): Invalid element in the configuration: 'wodle'. May 24 10:40:08 node1 env[1320]: 2024/05/24 10:40:08 wazuh-syscheckd: ERROR: (1230): Invalid element in the configuration: 'wodle'. May 24 10:40:09 node1 env[1320]: Started wazuh-syscheckd... May 24 10:40:09 node1 env[1320]: 2024/05/24 10:40:09 wazuh-logcollector: ERROR: (1230): Invalid element in the configuration: 'wodle'. May 24 10:40:10 node1 env[1320]: Started wazuh-logcollector... May 24 10:40:10 node1 env[1320]: 2024/05/24 10:40:10 wazuh-modulesd: ERROR: (1230): Invalid element in the configuration: 'wodle'. May 24 10:40:13 node1 env[1320]: Started wazuh-modulesd... ossec.conf.txt
May 24 10:40:15 node1 env[1320]: Completed. May 24 10:40:15 node1 systemd[1]: Started Wazuh agent.
Here is the configuration file. Let me know if anything seems missing here.