Is there a way in the code to disable the display of agents when you
remove an agent in manage_agents?
When you have 2 or 15 agents its fine, but when you have more than will fit
on the screen its not needed.
Steven
I would need to see some config files. Are you using agent.conf in the
shared folder on the master (with active response enabled in the ossec.conf
file)?
Can you post the ossec.conf and the agent.conf from the agent? I assume
that the ossec.conf files are the same on each of your agents.
On
What about setting the frequency to something really low like 60? Will the
agent try to check in every minute? Will the time stamp then be more
accurate, assuming the core isnt too busy to handle the information.
I also assume that there will be a point where the number of agents trying
to
I apologize for my ignorance.
Which file is that?
Thank you for your quick response!
Steven B.
On Sep 28, 6:06 pm, dan (ddp) ddp...@gmail.com wrote:
auth.h:#define KEYFILE /etc/sslmanager.key
auth.h:#define CERTFILE /etc/sslmanager.cert
On Wed, Sep 28, 2011 at 7:50 PM, Steven B. reeve
