Greetings: /var/ossec/etc/ossec.conf is overwritten on the server (I think it is safe on agents).
If you've commented out rules; you will need to redo all of that work (which is lost from every upgrade from the 1.x days until 2.1 inclusive). thank you.
