list_agents -n output - stale servers

[Farnsworth, Robert]

I have some stale servers that remain in my list_agents -n output, any way to refresh this list?

 

The servers have been remove with the manage_agent tool/command, but still remain in the output of list_agents -n

 

[dan (ddp)]

On Jul 11, 2014 10:09 AM, "Farnsworth, Robert" <robert.f...@hp.com> wrote:
>
> I have some stale servers that remain in my list_agents -n output, any way to refresh this list?
>
>  
>
> The servers have been remove with the manage_agent tool/command, but still remain in the output of list_agents -n
>

Remove them from the cliebt.keys file? Update list_agents to ignore removed agents?

>  
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[Farnsworth, Robert]

Remove them from the cliebt.keys file?  They do not exist in this file.

Update list_agents to ignore removed agents?  How do I ignore the removed agents?

[dan (ddp)]

On Jul 11, 2014 10:18 AM, "Farnsworth, Robert" <robert.f...@hp.com> wrote:
>
> Remove them from the cliebt.keys file?  They do not exist in this file.
>

Ok, there's probably an agent info file somewhere. Maybe in queue? I can't investigate for you right now, but I'll try a little later.

> Update list_agents to ignore removed agents?  How do I ignore the removed agents?
>
>  

Depends on where that info is getting pulled from. Looking at the code might help.

[dan (ddp)]

On Fri, Jul 11, 2014 at 10:21 AM, dan (ddp) <ddp...@gmail.com> wrote:
>
> On Jul 11, 2014 10:18 AM, "Farnsworth, Robert" <robert.f...@hp.com>
> wrote:
>>
>> Remove them from the cliebt.keys file? They do not exist in this file.
>>
>
> Ok, there's probably an agent info file somewhere. Maybe in queue? I can't
> investigate for you right now, but I'll try a little later.
>

Took a minute during lunch: Delete old entries in /var/ossec/queue/agent-info.

[dan (ddp)]

On Fri, Jul 11, 2014 at 12:56 PM, dan (ddp) <ddp...@gmail.com> wrote:
> On Fri, Jul 11, 2014 at 10:21 AM, dan (ddp) <ddp...@gmail.com> wrote:
>>
>> On Jul 11, 2014 10:18 AM, "Farnsworth, Robert" <robert.f...@hp.com>
>> wrote:
>>>
>>> Remove them from the cliebt.keys file? They do not exist in this file.
>>>
>>
>> Ok, there's probably an agent info file somewhere. Maybe in queue? I can't
>> investigate for you right now, but I'll try a little later.
>>
>
> Took a minute during lunch: Delete old entries in /var/ossec/queue/agent-info.
>

I opened up issue #244 to possibly interest someone into making this better.