[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ossec-list] timestamp for modified files
- To: ossec-list@xxxxxxxxxxxxxxxx
- Subject: [ossec-list] timestamp for modified files
- From: "Chad Rober" <chadrober@xxxxxxxxx>
- Date: Fri, 13 Apr 2007 09:10:28 -0400
- Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; b=FaGp9b+rrS/zBEqexv8k5BZ5gkFLd/8mWRC475ECtwYm0z216rSs0jk4Pb91c2lgQWL31WZE0V1UcoI0aFEAsQdTNI2tUHmRa0Wa3cfELnLhk0KAKPgk+FZ+79kcJyMxThEpb4mHrvCgFnyTpWs+9E6L+IILSyueoeOONt0Zyj0=
I've noticed the time a notification is sent regarding file with a different checksum can be greatly different from the actual time the file changed. I'll assume this is due to the frequency that OSSEC scans for file changes.
What I was wondering is how would I configure the client to read the modified time value and append that information to the notification email? Is that possible with the current build?
Thanks!
OSSEC home |
Main Index |
Thread Index
OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.