On Wed, Apr 5, 2017 at 11:32 AM, Martin <martin...@gmail.com> wrote: > Hello Victor, > > I tried to run a second manager and I've the same file > /var/ossec/etc/client.keys on it and on the first manager. I've copied the > local_rules, ossec.conf, local_decoder as well. > > And I've specified on the agents to listen on him as you told me ; > > <client> <server-ip>10.0.0.1</server-ip> <server-ip>10.0.0.2</server-ip> > </client> > > My first manager (10.0.0.1 here) is shutdown and none the agents are > listening on 10.0.0.2. > > What sould I look into ? >
It takes a while (30min?) for the agents to switch over. > Best regards. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.