If you use the manage-agent command to delete an agent it leaves the record in the client.keys file on the server, but puts a mask over the first portion of the of the record. I don¹t know if the index process just ignores these lines as it loads them or not, thus impacting the agent count. You can edit the client.keys file and remove those lines if you want. This will also allow that particular ID to be used again if that is desired.
--------------------------------------------------- Bryan K. Carter Sr. Security Analyst PCI Internal Security Assessor Deseret Management Corporation Salt Lake City, Utah [email protected] (801) 323-4234 On 8/18/14, 7:23 PM, "'Dave Watts' via ossec-list" <[email protected]> wrote: >Aloha List! > When we installed OSSEC the setmaxagents value was set to 1000. >Does this mean we can only have 1000 agents? What if we had 1000 >agents then deleted 500 of them only to add 500 more? What would the >behavior be in that scenario? > >Thanks! > >-- > >--- >You received this message because you are subscribed to the Google Groups >"ossec-list" group. >To unsubscribe from this group and stop receiving emails from it, send an >email to [email protected]. >For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
