It should restart the agent ossec processes on agent #200. Yes, it should refresh the PID files and show up in ossec.log.
I believe that you need to have active response enabled for this to work. I tried: agent_control -R 014 #System w/active response ENABLED This resulted in a restart. agent_control -R 015 #System w/active response DISABLED No restart. On Wed, Sep 30, 2009 at 1:06 AM, Gags <[email protected]> wrote: > > I am trying the ossec centralized agent management. If I am using > /var/ossec/bin/agent_control -R 200 (where 200 is the agent id) what > precisely it means ? > Will it refresh the PID in agent ( in /var/ossec/var/run) ? As it is > not happening nor it is reflected in the ossec.log on the agent side > > Regards > Gagan Bhatia >
