I think you can use "syscheck_control -u" to do this. Do a search of the archives, it has been mentioned before and I am not sure whether you have to stop the ossec processes before running this or not.
On Sat, Jan 16, 2010 at 6:03 PM, Dave S <[email protected]> wrote: > If I re-up a client box from the ground up, most of the integrity > checksums will have changed, and the old values will be meaningless. > > Is there a way to remove all previous integrity checksums so a client > can start from scratch? > > - Dave >
