Hi Andy, The easiest way is to uninstall OSSEC and reinstall it as an agent. To uninstall, just do:
# rm -rf /var/ossec/ # rm /etc/ossec-init.conf And re-run the install.sh... Hope it helps. -- Daniel B. Cid dcid ( at ) ossec.net On 10/8/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > Hi There, > > We've installed OSSEC as a "local" install on every server so far and > did not use the server/agent model. This might have been a bad move > because we have all our servers running a "local" install of OSSEC and > we want to now have a central management system so that white lists > can easily be implemented on the server and rolled out to all agents. > > Just need some details about how to make this work. Do we just re-run > install.sh and choose the "agent" installation or do we have to > totally uninstall OSSEC - if we have to uninstall OSSEC, how do we do > this? > > Thanks. > > Andy > >
