On Fri, Jul 8, 2011 at 4:59 PM, dan (ddp) <[email protected]> wrote: > On Fri, Jul 8, 2011 at 6:01 PM, William Voyek <[email protected]> wrote: >> >> Is there a way to do a clean install while still retaining the agent info? >> > > You can do an "upgrade" using the same version. Untar the tarball and > run the install.sh. It'll ask if this is an upgrade, answer yes. > >> Also, what are the specific files I need to remove to remove all >> traces of ossec? I know I will need to remove /var/ossec but are there >> any other files? >> >> William >> > > It depends on the platform. In Linux I think you'll need to remove > /etc/ossec-init.conf and /etc/rc.d/ossec. >
After doing the "upgrade" install the analysisd process appears to be running normally again. Thanks for all of your help. William
