Hey; Nevermind; I got it. Finally found the agent_control -l command which showed me that there was an agent 000 for localhost. agent_control -r -u 000 says it's running syscheck locally. Still not getting the alerts that I think I should be, but that's a different problem.
Thanks anyway. Doug O'Leary
