Most cases it does, when all counters are synced. If you loose server counters it won't, that is why I was saying to change that config in the agent too.
In any case I am glad it worked for what you needed. Best regards On Wed, May 4, 2016 at 2:26 AM, Zekicker <[email protected]> wrote: > For information, I tried to change the option in > /var/ossec/etc/internal_options.conf only for the OSSEC server. > > It works without changing it for the agents. > > > > > Le mardi 3 mai 2016 20:19:52 UTC+2, Zekicker a écrit : >> >> Thanks to you two !!! >> >> :) >> >> >> Le mardi 3 mai 2016 17:15:08 UTC+2, Santiago Bassett a écrit : >>> >>> Yes, and on the agents too. I know the agents do not run remoted but >>> they also use this variable to check counters. >>> >>> Santiago Bassett >>> @santiagobassett >>> >>> > On May 3, 2016, at 7:36 AM, dan (ddp) <[email protected]> wrote: >>> > >>> >> On Tue, May 3, 2016 at 10:26 AM, Zekicker <[email protected]> wrote: >>> >> Hi, >>> >> >>> >> Is it possible to disable the anti-replay feature of OSSEC ? >>> >> >>> >> I need to deploy and delete some VMs on demand. All must be >>> automatic. >>> >> >>> >> Do you have an idea to di it simple ? >>> > >>> > I believe you can set "remoted.verify_msg_id" to 0 in >>> > /var/ossec/etc/internal_options.conf on the manager. >>> > >>> >> regards, >>> >> >>> >> -- >>> >> >>> >> --- >>> >> You received this message because you are subscribed to the Google >>> Groups >>> >> "ossec-list" group. >>> >> To unsubscribe from this group and stop receiving emails from it, >>> send an >>> >> email to [email protected]. >>> >> For more options, visit https://groups.google.com/d/optout. >>> > >>> > -- >>> > >>> > --- >>> > You received this message because you are subscribed to the Google >>> Groups "ossec-list" group. >>> > To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> > For more options, visit https://groups.google.com/d/optout. >>> >> -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
