[ossec-list] Re: active-response question on the ossec server

[Peter M. Abraham]

Hi Daniel:

I just found out that the "all|server" ends up just using active-
response on the server.  The agents were not updated -- not on the
initial receiving agent, or any of the other agents.

Please advise.

Thank you.