Are you refering to the ossec web-ui? which screen is showing the host? If it is the alerts screen, you will continue to see the host, as it has generated alerts which are present in the alert log file, that the web-ui is parsing.
On Tue, Jul 19, 2011 at 7:01 PM, blacklight <[email protected]> wrote: > Hello Folks, > > I am trying to get a host that I had removed from OSSEC monitoring > through /var/ossec/bin/manage-agents completely off the list of hosts > in the OSSEC GUI - The host name still remains on the OSSEC GUI but > it's a ghost (or if you prefer, a zombie) - How do I wipe this ghost > out? > >
