Archive
Highlighted

no matching events found

Explorer

I have configured ossec server and splunk on the same box.Ossec agents are also configured.I have tried to login as root on ossec agent machine but when I make search in splunk,that event(login failure) is not found(reported.I need your help to fix it?

Tags (1)
0 Karma
Highlighted

Re: no matching events found

Contributor

Don't know ossec at all, but did you configure splunk's data input yet?

ps: Further I would re-tag that!

Highlighted

Re: no matching events found

Contributor

And by the way, you have five open questions and no respond from your site! Please give at least feedback (or tick it as closed) to the people trying helping you!