On Mon, Dec 3, 2012 at 2:00 PM, Mike Hubbard <[email protected]> wrote: > Yes, I experimented with that and found that you could either initialize the > database right off the bat, or wait the frequency duration before > initializing it....but not a don't initialize it.
So, modify the ossec-control script to not start it unless the db exists. There isn't an option for it.
