[ossec-list] Re: clear Ossec alert log

["Daniel Cid" <daniel.cid@xxxxxxxxx>]

Hi John,

To clear the file integrity history, just run:

$ /var/ossec/bin/syscheck_update -a

To delete all alerts, just remove the whole /var/ossec/logs/alerts/* directory:

$ rm -rf /var/ossec/logs/alerts/*

*Just make sure to stop ossec before doing that...


Hope it helps.

--
Daniel B. Cid
dcid ( at ) ossec.net


On 10/9/07, PKTan <jpktan@xxxxxxxxxxxx> wrote:
>
>
>
> Hi,
>       Is there any easy way to reset the OSEEC_SERVER  log entries ?
>       I have been running the ossec for about a month, I want to start a fresh ossec server without re-install everything. I unregistered all the ossec agent from the server, but the old alerts, registry and files integrity history still in the system , anyway to clear everything without reinstalling ossec-server ?
>
>
> Thanks in advance
>
>
> regards
> John
>           ________________________________
  Yahoo! Movies - Search movie info and celeb profiles and photos.