I did the same thing and did not loose any configs or agents. To be safe tar up your /var/ossec/*. I think all you will really be doing is compilling a new binary that supports logging to mysql. So this should not affect your agents. Goodluck.
--Phil On Jul 30, 2010 10:41 AM, "George Ochola" <[email protected]> wrote: HI All I had deployed OSSEC without database support and is currently having 30 agents runnning on a server-agent set up. I want to enable MYSQL database support, but according to the manual i will have to re-install and recompile OSSEC afresh. Does this mean i will loose the current configuration and start installing agents all over gain ? Kindly advice George O
