Dennis Borkhus-Veto wrote: > I appologize if I am sking something already addressed. I am building a new > server that will be my central syslog and ossec server and would like to know > if I copy the ossec directory from the old to the new server and change the > server address on the agents to have the agents go to the new server. > Or would it be the best to just do a fresh install? > > Dennis
I would do a fresh install so that it creates the startup scripts, users and groups for you, then remove the /var/ossec directory and copy the old directory in its place. Be mindful of permissions. Version 1.1 now supports hostnames for the server address, so when you change them you might want to use the new tag. That will make things easier if you move your server again.
