[ossec-list] recover SERVER keys?

2013-02-14 Thread Kat
Well - it happened - I lost a server (hardware raid failure and corrupted drives). So here is the question - all the agents have keys, but I lost the other end - is there ANY way to rebuild a server from this sort of thing and recover? I can't think of anything, since it is all built around

Re: [ossec-list] recover SERVER keys?

2013-02-14 Thread Daniel Cid
Yes, just get the client.keys from all the agents and make a single client.keys file on the server with all of them. The issue is the remote message ids, that you will need to clear on each agent (delete the rids directory) or the agents will not accept the messages from the manager. thanks, --