Yes, just get the client.keys from all the agents and make a single client.keys file on the server with all of them.
The issue is the remote message ids, that you will need to clear on each agent (delete the rids directory) or the agents will not accept the messages from the manager. thanks, -- Daniel B. Cid http://dcid.me On Thu, Feb 14, 2013 at 2:13 PM, Kat <uncommon...@gmail.com> wrote: > Well - it happened - I lost a server (hardware raid failure and corrupted > drives). > So here is the question - all the agents have keys, but I lost the other end > - is there ANY way to rebuild a server from this sort of thing and recover? > > I can't think of anything, since it is all built around the original server > key (lost), but it never hurts to ask.. > > And before you all yell at me about backups -- yes, I know. All my other > systems are backed up, just not this one. :-( > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/groups/opt_out. > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
