Doesn't sound intentional. Is the agent in a connected state when you have this problem? Are there any strange messages in the agent's ossec.log? How do you know the restart doesn't work?
On Thu, Feb 24, 2011 at 1:21 PM, jplee3 <[email protected]> wrote: > Hey all, > > I've noticed that sometimes, after I restart the OSSEC server, and I > try to issue the 'agent_control -R [id]' command to remotely restart > an agent, it doesn't seem to work. I have to manually log on to the > box where the agent is, restart OSSEC ('/etc/init.d/ossec restart') > and then from there I am able to issue the restart via agent_control. > > Is this intentional?
