[ossec-list] Re: Where can I find upgrade instructions?

[MdMonk <mdmonk@xxxxxxxxx>]

Peter-

Upgrading is pretty straight forward. The ossec installer will detect
if you have ossec installed already, and offer to upgrade the ossec
installation and the rules.
Even though the ossec installer shouldn't overwrite your
local_rules.xml (which is the file where your rules and rule changes
should reside), I would back up the ossec directory before upgrading;
just in case. The installer will write out the rule files, overwriting
the default rule files with the new(er) ones. BUT the installer *will*
back up your rules directory first.

For example, here I am upgrading an ossec server install to v1.3, and
I receive this prompt:
" - You already have OSSEC installed. Do you want to update it? (y/n): "
If you select/press "n", then ossec will continue on with a fresh
install. If you select/press "y", it will ask about the rules next:
" - Do you want to update the rules? (y/n): ", and I select "y" to do
the complete upgrade.

The ossec installer will then make a backup of your ossec.conf before
modifying it, and it will back up the rules files before writing the
new(er) rules files to the rules directory. The installer will also
update your /etc/ossec-init.conf with the new information (ossec ver,
install date, blah).

Does that make sense?

-Chuck (MdMonk)

On 8/8/07, Peter M. Abraham <peter.m.abraham@xxxxxxxxx> wrote:
>
> Greetings:
>
> Where can I find upgrade instructions for upgrading from 1.2 to 1.3?
>
> If I run the install.sh script, will the system preserve custom
> changes I've made to /var/ossec/etc/ossec.conf and /var/ossec/rules
> (various xml files)?
>
> For the Windows upgrade, will it preserve the custom settings for the
> location of IIS log files?
>
> Thank you.
>
>