I am going to update my Linux servers and I tried to disable the ossec-agent for this time. I was the following workarounds: 1. stop agent on a host 2. run /var/ossec/bin/syscheck_control -u AGENT_ID 3. update 4. up agent But after start agent I got lots of trigger "new files in the server" alarms. (alert_new_file - yes)
How to properly disable the ossec-agent on a host during the Linux update or for modifying files? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
