Hi Derek. Unfortunately, OSSEC is not designed to work offline. Messages are actually queued while the agent tries to connect to the server, but this memory is very small and will be filled quickly.
If you stop or restart the agent, the queued data will be lost. Regards. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.