Yes, you can disable all rules via OSSEC.conf. From the testing I did, the only rules that have to always remain enabled are OSSEC.rules, rules_config and local rules
On Tuesday, April 25, 2017 at 11:25:57 AM UTC-4, Huc Manté Miras wrote: > > Hello, > > I try to disable all rules to ossec server. > > This is possible? > > Thanks!! > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.