Nope. Right now (and I have no idea if this will ever change) there's no way to change this behavior.
Sent from my Nokia phone -----Original Message----- From: Thomas K. Rosin Sent: 06/28/2010 8:20:36 AM Subject: Re: [ossec-list] Centralized agent configuration: How to overwrite complete local configuration? Hi Dan, thanks for your answer. Is there no centralized way to "overwrite" the options on the agents? Best regards, Thomas. On 26.06.2010 05:43, dan (ddp) wrote: > Remove those options from the ossec.conf on the agents. > > On Fri, Jun 25, 2010 at 6:53 AM, Thomas K. Rosin <[email protected]> wrote: >> Hi, >> >> I tried out the centralized agent configuration today. I saw, that the local >> and the centralized configuration are merged. >> >> Is there an option to completely ignore/overwrite the local configuration? >> >> In my case I want to remove a local configured "<localfile>"-option. >> >> Best Regards, >> >> Thomas >>
