If you inherited the install, first make sure it wasn't installed through a package manager by running a: yum list installed | grep ossec
If you get a response, do a yum remove of the package name returned. If you don't, then stop the app with: sudo /var/ossec/bin/ossec-control stop (if that doesn't work, it may have had its binaries installed elsewhere; do a sudo find / -name ossec-control and run that path with a stop command). Then find where all the files and directories are with a: sudo find / -name *ossec* and a sudo find / -name *hids* which should give you all the places needed to do a manual scrape-out. Inelegant, I know, but I haven't found a better way. Perhaps some day someone will add an uninstaller to the tarball installer, but in the meantime, this is what's worked for me. Best of luck, Scott On Mon, Jul 27, 2020, 16:56 Carlos Islas <[email protected]> wrote: > Hello to everybody, > > I need to do the uninstall the OSSEC server from a Redhat OS. I was > searching info in the group post but idont find anything. How can i do this? > > Thank you. > > Regards. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/78308faa-ecf1-4495-abef-122bfdcf4794o%40googlegroups.com > <https://groups.google.com/d/msgid/ossec-list/78308faa-ecf1-4495-abef-122bfdcf4794o%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CACUKT_q4KHOX%3DEfDJddWP6xSr3w1-ZbQYSPAFOV5iBqWAW5qxw%40mail.gmail.com.
