After pushing a changed rule set to the agent, will detect need to be manually restarted?
Will the detect processes automatically start again after I push a ruleset to the agent?
Do I have to restart the detect processes after I change ruleset?
VigilEnt Security Agent for Unix 5.0+
You do not need to manually restart the detect processes. A detect process exists to check the rule set and will restart detect and its groups if needed. This process,
./perl - vrun detectd, looks at
detect.xml each minute to see if the file has changed. If changes are found, detect will be restarted as needed.
Use the Unix command
ps -ef | grep detect to see all detect processes running on the system.