page_title: Su-log-2013-10-07 page_touched: 20131015174455 old_text: ===Tuesday=== * ossec packaging /etc/ossec-init.conf not being created FIXED touch /var/ossec/logs/active-responses.log; chown ossec:ossec /var/ossec/logs/active-responses.log cp -pr ../etc/client.keys ${DIR}/etc/ > /dev/null 2>&1 cp -pr agentlessd/scripts/ ${DIR}/agentless/ cp -pr ../etc/internal_options.conf ${DIR}/etc/ cp -pr rootcheck/db/.txt ${DIR}/etc/shared/ * Move logindex data to logindex2 * Install new memory and disks in logsh and logindex-old * Work with Xueshan on directory acl updates

===Wednesday=== * more ossec package building * Restructure the splunk manifest * Catch up on directory tickets * Modify gsbWebAuthPrivileged * Start splunk backups

===Thursday=== * Splunk for OSSEC package

===Friday=== * OSSEC puppet model work - pull package install until package works * Update splunk licenses and get dev environment up again

---

SUDailyLogs 282. row