hiya,
it's me again. i promise this will be the last question, at least for this
week ;)
alright, i understand this might sound daft to you. but is there a way to
disable the remoted process in ossec? i accidentally installed the server
version, whereas the local installation would have just been sufficient as
i only really want to monitor one server.
i thought i would just disable or uncomment the <remote></remote> part in
the ossec.conf and would just restart it.
<!--
<remote>
<connection>secure</connection>
</remote>
-->
just like that.
but unfortunately, after restarting ossec the ossec-remoted process just
seems to be started again...
2015/07/10 18:52:09 ossec-remoted: DEBUG: Starting ...
2015/07/10 18:52:09 ossec-remoted: INFO: Started (pid: 11943).
2015/07/10 18:52:09 ossec-remoted: DEBUG: Forking remoted: '0'.
2015/07/10 18:52:09 ossec-remoted: INFO: Started (pid: 11944).
2015/07/10 18:52:09 ossec-remoted: DEBUG: Running manager_init
2015/07/10 18:52:10 ossec-remoted: INFO: (unix_domain) Maximum send buffer
set to: '124928'.
2015/07/10 18:52:10 ossec-remoted(4111): INFO: Maximum number of agents
allowed: '256'.
2015/07/10 18:52:10 ossec-remoted(1410): INFO: Reading authentication keys
file.
2015/07/10 18:52:10 ossec-remoted(1402): ERROR: Authentication key file
'/etc/client.keys' not found.
2015/07/10 18:52:10 ossec-remoted(1750): ERROR: No remote connection
configured. Exiting.
2015/07/10 19:04:00 ossec-remoted: DEBUG: Starting ...
2015/07/10 19:16:02 ossec-remoted: DEBUG: Starting ...
is there a way to stop this? how can i disable it so that it doesn't get
started in the first place?
i'd hate to re-install, after feeling so comfortable with my current setup
right now. and i'd just like to temporarily disable/deactive it so that i
could come back and enable the remoted in the near future (taking the next
steps and adding agents).
really sorry if this sounds stupid, but i couldn't find an answer to
this..neither in the docs nor in the interwebs...
thanks,
theresa
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
