[ossec-list] Re: Re-installing OSSEC as an agent

["Daniel Cid" <daniel.cid@xxxxxxxxx>]

Hi Andy,

The easiest way is to uninstall OSSEC and reinstall it as an agent. To
uninstall, just do:

# rm -rf /var/ossec/
# rm /etc/ossec-init.conf

And re-run the install.sh...

Hope it helps.

--
Daniel B. Cid
dcid ( at ) ossec.net

On 10/8/07, tswmmeejsdad@xxxxxxxxx <tswmmeejsdad@xxxxxxxxx> wrote:
>
> Hi There,
>
> We've installed OSSEC as a "local" install on every server so far and
> did not use the server/agent model. This might have been a bad move
> because we have all our servers running a "local" install of OSSEC and
> we want to now have a central management system so that white lists
> can easily be implemented on the server and rolled out to all agents.
>
> Just need some details about how to make this work. Do we just re-run
> install.sh and choose the "agent" installation or do we have to
> totally uninstall OSSEC - if we have to uninstall OSSEC, how do we do
> this?
>
> Thanks.
>
> Andy
>
>