I am going to update my Linux servers and I tried to disable the
ossec-agent for this time.
I was the following workarounds:
1. stop agent on a host
2. run /var/ossec/bin/syscheck_control -u AGENT_ID
3. update
4. up agent
But after start agent I got lots of trigger "new files in the server"
It will be great if you implement this.
I'll wait with impatience.
On Wednesday, May 31, 2017 at 8:22:24 PM UTC+3, Pedro Sanchez wrote:
>
> Great! Good to know its working!
>
> Thanks for coming back to tell us.
>
> I believe we will develop a easier way to do this on the future, something
>