Would it be possible to remove the fcntl Python module dependency from the pyOSSEC.py script? The fcntl module is only available on Unix.
Perhaps the README should be updated, in the meantime, to indicate that the OSSEC app is not 100% compatible with Windows.
Example error from a Windows Splunk install:
[subsearch]: External search command 'ossecservers' returned error code 1. Script output = "Traceback (most recent call last): File "X:\Splunk\bin\runScript.py", line 69, in execfile(REAL_SCRIPT_NAME) File "X:\Splunk\etc\apps\ossec\bin\ossecservers.py", line 13, in from pyOSSEC import * File "X:\Splunk\etc\apps\ossec\bin\pyOSSEC.py", line 12, in import fcntl ImportError: No module named fcntl "
... View more