On Wed, 20 Jul 2011 09:37:39 -0700 (PDT), blacklight wrote:
Oh, yes ! In fact, every time an agent is added or deleted through /var/ossec/bin/manage-agents, manage-agents will print on your screen areminder to restart OSSEC :)
Fwiw, restarting ossec is actually only necessary after adding the first agent. Subsequent agents should not require a restart.
-- Michael Starks [I] Immutable Security http://www.immutablesecurity.com
