Oh, yes ! In fact, every time an agent is added or deleted through / var/ossec/bin/manage-agents, manage-agents will print on your screen a reminder to restart OSSEC :)
On Jul 20, 11:59 am, Jorge Armando Medina <[email protected]> wrote: > On 07/20/2011 09:51 AM, blacklight wrote:> I am indeed referring to the ossec > web-ui. > > > The host is listed as "inactive" and has not generated any alerts > > since it has been removed via /var/ossec/bin/manage-agents. > > Did you restart ossec server after removing the agent? > > > > > > > > > > > > > On Jul 20, 9:27 am, Christopher Moraes <[email protected]> wrote: > >> Are you refering to the ossec web-ui? which screen is showing the host? > > >> If it is the alerts screen, you will continue to see the host, as it has > >> generated alerts which are present in the alert log file, that the web-ui > >> is > >> parsing. > > >> On Tue, Jul 19, 2011 at 7:01 PM, blacklight <[email protected]> wrote: > >>> Hello Folks, > >>> I am trying to get a host that I had removed from OSSEC monitoring > >>> through /var/ossec/bin/manage-agents completely off the list of hosts > >>> in the OSSEC GUI - The host name still remains on the OSSEC GUI but > >>> it's a ghost (or if you prefer, a zombie) - How do I wipe this ghost > >>> out? > > -- > Jorge Armando Medina > Computación Gráfica de México > Web:http://www.e-compugraf.com > Tel: 55 51 40 72, Ext: 124 > Email: [email protected] > GPG Key: 1024D/28E40632 2007-07-26 > GPG Fingerprint: 59E2 0C7C F128 B550 B3A6 D3AF C574 8422 28E4 0632
