I have custom scripts that use several of the Ossec commands and rotate through the active and non-active clients. These same scripts report, via email, when a client is "never connected" or "disconnected". The one client has been removed for several days.
BW -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of dan (ddp) Sent: Tuesday, June 21, 2011 3:44 PM To: [email protected] Subject: Re: [ossec-list] Ossec Server Cleanup Which reports? If you're talking about ossec reports, you'll have to wait for there to be a day when no alerts have been generated by that old system. On Tue, Jun 21, 2011 at 2:53 PM, Walker, Barry <[email protected]> wrote: > I have two ossec client servers that don't disappear from my reports > even though they have been deleted from "manage_agents", > "client.keys" and "queue/syscheck". What file/app should I modify to > eliminate them from the Ossec server and it's reports completely? > > > > BW > >
