After pushing a changed rule set to the agent will detect need to be manually restarted (NETIQKB47558)

  • 7747558
  • 02-Feb-2007
  • 24-May-2007

Resolution

goal

After pushing a changed rule set to the agent, will detect need to be manually restarted?



goal
Will the detect processes automatically start again after I push a ruleset to the agent?

goal
Do I have to restart the detect processes after I change ruleset?

fact
VigilEnt Security Agent for Unix 5.0+

fix

You do not need to manually restart the detect processes. A detect process exists to check the rule set and will restart detect and its groups if needed.  This process, ./perl -  vrun detectd, looks at detect.xml each minute to see if the file has changed. If changes are found, detect will be restarted as needed.

Use the Unix command ps -ef | grep detect to see all detect processes running on the system.



Additional Information

Formerly known as NETIQKB47558