I am removing agents via the ossec-batch-manager.pl program; that is
to say, remotely. It leaves queue entries, which results in inactive
agents being displayed in ossec-wui.
Bernard Golden
Chief Executive Officer, HyperStratus
www.hyperstratus.com
Author, "Virtualization for Dummies," Dummies Press, 2007
(T) 650 585 5309 (C) 650 400 3204 (F) 650 591 3805
Follow me on twitter: bernardgolden
On Jan 8, 2010, at 11:13 AM, Daniel Cid wrote:
Hey,
When you remove from manage_agents it does also remove the file from
/var/ossec/queue/agent-info.
thanks,
--
Daniel B. Cid
dcid ( at ) ossec.net
On Wed, Jan 6, 2010 at 9:26 AM, Dave S <[email protected]> wrote:
I was seeing the same issue, and removing the file from /var/ossec/
queue/agent-info worked like a champ for me.
A bug fix for v2.3.1?
