I have an two ec2 instances. In one I have installed ossec server and in other I have installed ossec agent.
Here are my server config
INBOUND (security group/firewall) :
port:514 source:0.0.0.0/0 port:1514 source:0.0.0.0/0
But it seems to be not working. In my agent log file I keep on getting:
2012/08/28 06:52:52 ossec-agentd: INFO: Using IPv4 for: x.x.x.x.x.x . 2012/08/28 06:53:13 ossec-agentd(4101): WARN: Waiting for server reply (not started). Tried: 'x.x.x.x.x'.
sudo netstat --inet -nlp | grep ossec. I'm getting:
udp 0 0 0.0.0.0:1514 0.0.0.0:* 26027/ossec-remoted
Where I'm making the mistake?