On Wed, Nov 6, 2013 at 10:18 AM, Youngquist, Jason R. <[email protected]> wrote: > Hi. > > So I had OSSEC 2.6 installation and the box crashed. I decided to use this > as an excuse to upgrade the box. Right now I'm using Security Onion which is > running OSSEC 2.7. I'm actually using the same IP address of the old box, so > all of my OSSEC Windows clients should be able to check in once I get the > OSSEC server up and running. > > I do have a good backup of my old server, so trying to figure out what > file(s) I will need or to modify. I know I'll need to modify/copy over > ossec.conf and local_rules. Can I just copy over the client.keys file from > the 2.6 box to the 2.7 box? Are there any other files from the old 2.6 box > that I need? >
client.keys should transfer just fine. /var/ossec/queue/rids has some files that are important. After you stop OSSEC copy those files over. The decoder and rules files could be useful... agent.conf if you're using that. > > Thanks. > Jason Youngquist, CISSP, CISA, GWAPT, GCWN > Information Security Engineer > Columbia College - Technology Services > 1001 Rogers Street, Columbia, MO 65216 > (573) 875-7334 > [email protected] > http://www.ccis.edu > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
