Hmmm, this didn't go to the list.
---------- Forwarded message ---------- From: dan (ddp) <[email protected]> Date: Thu, Jan 24, 2013 at 10:34 AM Subject: Re: [ossec-list] Patching a server without "spam" To: Michael Namaiandeh <[email protected]> On Thu, Jan 24, 2013 at 9:38 AM, Michael Namaiandeh <[email protected]> wrote: > The syscheck db on the OSSEC server? > I don't think there is another syscheck db. But yes, that is the db I meant. And you should only have to clear that agent's db. > > > On 1/24/13 9:36 AM, "dan (ddp)" <[email protected]> wrote: > >>On Wed, Jan 23, 2013 at 4:26 PM, Michael Namaiandeh >><[email protected]> wrote: >>> Hi there, >>> >>> >>> >>> I would like to patch a server of mine that has the OSSEC agent >>>installed >>> without being flooded with hundreds of emails by my OSSEC server. Is >>>there >>> a way to disable monitor for a short maintenance window for a given >>>server? >>> Thanks. >>> >>> >>> >>> Mike >> >>You could try clearing the syscheck db before patching the system. >>Then a new baseline would be created and no alerts should be sent. >> >>-- >> >> >> > --
