Hi, I don't know if it is what you need, but Wazuh has an script to update the ruleset (rules, decoders and rootchecks). Also, this script allows do a bakcup of* /var/ossec/etc* and* /var/ossec/rules* and you can restore from the script.
Ruleset repository <https://github.com/wazuh/ossec-rules>. Script documentation <http://wazuh-documentation.readthedocs.org/en/latest/ossec_ruleset.html#automatic-installation> . Regards. Jesus Linares. On Thursday, February 25, 2016 at 7:37:30 AM UTC+1, Eero Volotinen wrote: > > Just shutdown the server and pack /var/ossec-directory and init scripts to > tarball? restore works just unpacking the tarball to correct directory. > > -- > Eero > > 2016-02-25 7:56 GMT+02:00 <[email protected] <javascript:>>: > >> Hi Team, >> >> Can someone help tell how to take backup & restore for OSSEC 2.8.3. >> >> >> Regards >> Vipin Hooda >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> For more options, visit https://groups.google.com/d/optout. >> > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
