Page 1 of 1

oum install kofe: "no match"

Posted: Mon Feb 22, 2021 2:45 pm
by raskolnikov88
I'd been running ossec for some time and found it to be reliable and useful. I then learned about ossec+ and wanted to upgrade the capabilities, with an eye to bringing it to the workplace.

I followed the install docs for ossec+ and downloaded ossec+, which started and ran successfully.

But the next step failed:

Code: Select all

[root@ossec ~]# oum install kofe

Installing Package: kofe

Last metadata expiration check: 0:40:08 ago on Mon 22 Feb 2021 10:04:17 AM PST.
No match for argument: kofe
Error: Unable to find a match: kofe

 ERROR: There was a problem installing kofe!

[root@ossec ~]#
The system is centos 8. Any advice welcome.

Re: oum install kofe: "no match"

Posted: Tue Feb 23, 2021 1:05 am
by raskolnikov88
Since nobody was able to answer, I tested a hunch and installed kofe on centos 7, with no problems.

So, kofe is not available for rhel/centos 8, which has been out since 2019.

Any idea when the elk stack will be available for rhel/centos 8?

Thanks for any roadmap hints you can drop.

Re: oum install kofe: "no match"

Posted: Tue Feb 23, 2021 2:38 pm
by raskolnikov88
Apparently the elk stack is not supported on Debian either -

Code: Select all

root@dbosp:~# oum install kofe

Installing Package: kofe

/usr/sbin/oum: line 434: yum: command not found

 ERROR: There was a problem installing kofe!

root@dbosp:~#


I'd be happy to beta test code for Debian, or for RHEL 8. After all, the sole reason for moving from ossec to ossec+ is the elk stack.

Re: oum install kofe: "no match"

Posted: Thu Feb 25, 2021 11:37 am
by cponton
I regret the delayed reply!

We currently have developers working on kofe for Centos 8 and we hope to have an update later today.

Re: oum install kofe: "no match"

Posted: Sat Feb 27, 2021 11:22 am
by cponton
Good morning! You should be able to install now:

oum install kofe

Please let us know if you encounter any issues. Thanks!

Re: oum install kofe: "no match"

Posted: Thu Mar 18, 2021 6:17 am
by cpclaudio
Hello I have the same problem on an Ubuntu 16.04.6 LTS release.

Thanks for the support.
Regards.

Re: oum install kofe: "no match"

Posted: Thu Mar 18, 2021 8:22 am
by cponton
Only CentOS 7/8 and RHEL 7/8 are supported at this time for the OSSEC+ HUB. Ubuntu boxes can be added as agents, though.