Help
Troubleshooting
An agent shows “Never connected”
The agent registered but hasn’t reached the manager. Check, in order:
- The agent service is actually running on the endpoint.
- The endpoint can reach the manager on port 1514 — on Windows:
Test-NetConnection 185.182.8.234 -Port 1514. - The agent log shows the reason — Windows:
C:\Program Files (x86)\ossec-agent\ossec.log; Linux:/var/ossec/logs/ossec.log.
A dashboard shows “No results match your search criteria”
- Widen the time range (top-right) to Last 24 hours or This week.
- Remove any pinned filters (e.g. a specific agent or rule group).
- After major changes, hard-refresh (Ctrl/Cmd+Shift+R) or clear site data to drop stale state.
Most demo environments ship with sample data. If numbers look inflated or unreal, that sample data can be cleared so the dashboard reflects only your real endpoints.