Hi, I have installed sguil and have an installatio...

2011-05-19T20:01:46.723-04:00

Hi,
I have installed sguil and have an installation of ossec. I'm trying the ossec_agent.tcl in order to see ossec alerts on sguil, but I'm getting an error message. Can you give me a clue?
--------------------------
wrong # args: should be "regsub ?switches? exp string subSpec varName"
while executing
"regsub {(?x)
^::ffff:
} $retVal """
(procedure "ResolveHostname" line 16)
invoked from within
"ResolveHostname $agent"
(procedure "ProcessData" line 112)
invoked from within
"ProcessData $line"
(procedure "ReadFile" line 13)
invoked from within
"ReadFile $fileID"
(procedure "InitAgent" line 43)
invoked from within
"InitAgent"
(file "./ossec_agent.tcl" line 684)
-----------------------
many thanks and keep the good work!

Comments on Infosec Potpourri: Switching to Sguil: A whole new meaning

Hi, I have installed sguil and have an installatio...