On 05/18/2011 03:34 PM, Michael Altfield wrote:
Hi list,Is there any OSSEC documentation out there on best practices when backing up the OSSEC Manager?
Everything except the init script and /etc/ossec-init.conf is in your ossec directory (/var/ossec by default). Certain files like sockets (in the queue dir) don't need to be backed up. Maybe you only want archived log files and not the running alerts.log. Pick your poison.
