narrowed it down in the log /var/ossec/logs/ossec.log

2011/07/24 09:41:13 ossec-dbd: Connected to database 'tortix' at '127.0.0.1'.
2011/07/24 09:41:13 ossec-dbd(5203): ERROR: Error executing query 'SELECT id from server where hostname = 'mysite.com''. Error: 'Table 'tortix.server' doesn't exist'.
2011/07/24 09:41:13 ossec-dbd(5209): INFO: Closing connection to database.
2011/07/24 09:41:13 ossec-dbd(5210): INFO: Attempting to reconnect to database.
2011/07/24 09:41:13 ossec-dbd: Connected to database 'tortix' at '127.0.0.1'.
2011/07/24 09:41:13 ossec-dbd(5203): ERROR: Error executing query 'INSERT INTO server(last_contact, version, hostname, information) VALUES ('1311493273', 'v2.6', 'mysite.com', 'Linux mysite.com 2.6.32.43-6.art.x86_64 #1 SMP Thu Jul 14 14:14:48 EDT 2011 x86_64 - OSSEC HIDS v2.6')'. Error: 'Table 'tortix.server' doesn't exist'.
2011/07/24 09:41:13 ossec-dbd(5209): INFO: Closing connection to database.
2011/07/24 09:41:13 ossec-dbd(5210): INFO: Attempting to reconnect to database.
2011/07/24 09:41:13 ossec-dbd: Connected to database 'tortix' at '127.0.0.1'.
2011/07/24 09:41:13 ossec-dbd(5204): ERROR: Database error. Unable to run query.
2011/07/24 09:41:13 ossec-dbd(5203): ERROR: Error executing query 'SELECT id FROM server WHERE hostname = 'mysite.com''. Error: 'Table 'tortix.server' doesn't exist'.
2011/07/24 09:41:13 ossec-dbd(5209): INFO: Closing connection to database.
2011/07/24 09:41:13 ossec-dbd(5210): INFO: Attempting to reconnect to database.
2011/07/24 09:41:13 ossec-dbd: Connected to database 'tortix' at '127.0.0.1'.
2011/07/24 09:41:13 ossec-dbd(1202): ERROR: Configuration error at '/var/ossec/etc/ossec.conf'. Exiting.
2011/07/24 09:41:13 ossec-execd: INFO: Adding offenders timeout: 1200 (for #1)
2011/07/24 09:41:13 ossec-execd: INFO: Adding offenders timeout: 2400 (for #2)
2011/07/24 09:41:13 ossec-execd: INFO: Adding offenders timeout: 4800 (for #3)

seems that some tables are missing from the tortix database; not sure how that could have happened though.. looking at the table structure i see these tables:

mysql> show tables;
+---------------------------+
| Tables_in_tortix |
+---------------------------+
| pgui_error_str |
| pgui_hids_cat |
| pgui_modules |
| pgui_modules_groups |
| pgui_modules_windows |
| pgui_modules_windows_user |
| pgui_system_const |
| pgui_system_events |
| pgui_system_log |
| pgui_system_var |
| pgui_user |
| pgui_user_access |
| pgui_user_group |
| pgui_user_group_privs |
| pgui_user_privs |
| pgui_waf_cat |
| pgui_waf_cat_rule_map |
| pgui_waf_rules |
+---------------------------+

any help would be greatly appreciated!

Did you happen to solve this? I believe are issues are related.

probably indicates a failed upgrade in that example, or the mysql database is corrupted

same issue here

That means something is wrong with your database, either something is wrong with mysql, or your database has been corrupted somehow. Check these log files foer for errors:

/var/log/mysql.log

/var/ossec/log/ossec.log

Also, please see the FAQ for troubleshooting database problems, here are three common issues when either mysql has a corrupt database, or mysql is not configured correctly:

https://www.atomicorp.com/wiki/index.ph ... he_ASL_GUI

https://www.atomicorp.com/wiki/index.ph ... ne_away.27.

https://www.atomicorp.com/wiki/index.ph ... 7.0.0.1.27

The FAQ has lots of information on common (and not so common) errors and conditions, please check the FAQ first as its very likely your specific issue is already documented, and a simple procedure to resolve this issue is already included:

https://www.atomicorp.com/wiki/index.php/ASL_FAQ

If you can not find that issue, please post any errors you have in those two logs files.