The daily OSSEC HIDS notices I normally receive have stopped. How do I begin to troubleshoot?
Howdy,
Well, I don’t know the slightest thing about OSSEC HIDS… however, whenever something stops working as expected, the logs typically tell the tale of what’s going on
So, I’d start by looking in the logs and see if you can find any errors. If OSSEC HIDS is a daemon, I’d make sure it’s still running. If it is running, try restarting it.
I’d look in the the application’s log files, as well as the email logs, at roughly the time you expected your notices to see what errors show up at that time.
-Eric