Hey,
when removing an agent with manage_agents, it seems like the agent-info file
stored in {ossecdir}/queue/agent-info/ will not be deleted.
If you delete that file (in your case probably named "elvis-144.122.90.10"
and refresh the WUI, the ghost should not show up anymore.
KR,
Oscar
On Mon, Mar 15, 2010 at 3:10 PM, Michael Barrett
<[email protected]>wrote:
> Hello
>
> I have a machine that used to be configured with OSSEC which now has a
> different IP address
>
> The OLD IP address is showing up on the web interface as well as the new IP
> address
>
> The old one shows as inactive.
>
> The license key has been removed from the server.
>
> How do I get this "ghost" to go away?
>
> (Embedded image moved to file: pic21726.jpg)
>
> Bad elvis
>
> (Embedded image moved to file: pic14771.jpg)
>
>
> Good elvis
>
>
> (Embedded image moved to file: pic11538.jpg)
>
>
> Thank you
> ____________________________________________
> Michael Barrett | Information Security Analyst - Lead | Mortgage Guaranty
> Insurance Corporation
> 270 E. Kilbourn Ave. | Milwaukee, WI 53202 USA | ( 1.414.347.6271 | 7
> 1.888.601.4440 | * [email protected]
>
>
> “Accomplishing the impossible means only that your boss will add it to your
> regular duties” Doug Larson
>
> This message is intended for use only by the person(s) addressed above and
> may contain privileged and confidential information. Disclosure or use of
> this message by any other person is strictly prohibited. If this message is
> received in error, please notify the sender immediately and delete this
> message.
