Are these IP changes on the same subnet or are these like travelling laptops that appear in texas today and virginia the next? If they are on the same subnet you can add teh CIDR notation to the IP you are using to register the agent 192.168.101.0\24 etc. please double check my syntax. please see: http://www.ossec.net/wiki/index.php/Know_How:DynamicIPs
Good hunting sir, Frank Moss On Aug 27, 10:14 am, "Knoll, Duane" <Dame [email protected]> wrote: > I have several boxes that periodically get an IP change. > > Is there a way to adjust the IP within Ossec so that I don't have to keep > deleting agents and re-adding them? > > Could it be as easy as changing the names in /var/ossec/queue/agent-info? > > Duane
