IIRC if you delete the queue/rids/${AgentID} on the agent and master and restart ossec on both it should "reset" it.
On 2/11/2014 6:47 PM, Eero Volotinen wrote:
Hi List,I have some issues with ossec. My ossec server was down about week and after starting ossec server, all clients start to flood server and they also eat disk io from client servers.How to resolve this issue, ie. reset all clients to fresh "today" state? -- Eero -- ---You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].For more options, visit https://groups.google.com/groups/opt_out.
smime.p7s
Description: S/MIME Cryptographic Signature
