ossec-analysisd: ERROR: read error

[nickbijmoer]

Hello guys, I get this error every time, someone knows how to fix it?

ossec-analysisd: ERROR: read error on /queue/diff/server/533/last-entry

Greetings,

Nick

[hunters_splunk · Accepted solution]

Hi Nick,

Please try shutting down OSSEC, deleting that file (/queue/diff/server/533/last-entry), and starting OSSEC back up.

Hope it will work this time. Thanks!
Hunter

[nickbijmoer]

I think that worked 🙂 thanks !

[hunters_splunk]

Great - glad know it worked!
Cheers
Hunter