Project

General

Profile

Bug #352

Can't remove analyzer with empty ID

Added by Vitaly Tskhovrebov almost 15 years ago. Updated almost 15 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
Yoann VANDOORSELAERE
Target version:
-
Start date:
06/11/2009
Due date:
% Done:

0%

Resolution:

Description

Prewikka 0.9.14

Can't remove incorrectly added analyzer from prelude-manager.
An analyzer sends it's heartbeats, but not events.

I need to revoke it and to register it again, but do not know how.

An Agents tab cannot do that.

History

#1 Updated by Vitaly Tskhovrebov almost 15 years ago

Well, i still can remove them in /etc/prelude/profile

I need to prelude-admin list, 

prelude-manager      n/a             n/a
snort                idmef:w admin:r 1557575420603047
spbsec02             n/a             n/a
prelude-lml          idmef:w admin:r 2215603055646320
prelude-manager.conf n/a             n/a

And I have 3! misconfigured agents.
Removing that profiles could help. I'll add comments later.

#2 Updated by Yoann VANDOORSELAERE almost 15 years ago

  • Status changed from New to Rejected
  • Target version deleted (0.9.14)

We provided you with a tips in #350 about the way to get rid of invalid analyzer within your database.

Deleting them directly from Prewikka is unsupported, the real issue was that Prewikka wouldn't draw the agent list correctly (which is fixed in #350),
but I don't expect Prewikka to let you delete an agent that shouldn't have made it to your database first (since the analyzer object content is obviously not correct).

Also available in: Atom PDF