On Jul 17, 2013 2:54 PM, "David Blanton" <[email protected]> wrote: > > Can someone confirm if /opt/ossec/queue/rids (or var/ossec/queue/rids) agent side (for several agents) and server side are suppose to have different amounts of agent ID files? > > For example, on one agent, I'll see 012, 011, 007, and 004 in the rids folder. Another agent will only have 002 in that file. Another will have 001, 003 and 005. The server has all of them. There seems to be no pattern? >
My agent only has a file named 001, which is also its agent id, and a file named sender_counter. > -- > > --- > You received this message because you are subscribed to the Google Groups "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
