[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ossec-list] Windows audits

To: <ossec-list@xxxxxxxxxxxxxxxx>
Subject: [ossec-list] Windows audits
From: "Dennis Borkhus-Veto" <dbveto@xxxxxxxxxxx>
Date: Thu, 9 Aug 2007 20:29:54 -0500
Content-class: urn:content-classes:message
Thread-index: Acfa7fQUGabm1RsZTT22qLzTjART6w==
Thread-topic: Windows audits

In the new version windows audits have been added the problem I have is that what ever I set up to audit has to be on all of the agents.  I want to monitor a couple of processes but they are not on all of the agents.  So I get alerts for the agents that don't have the processes.
Dennis

<<inline: winmail.dat>>

Prev by Date: [ossec-list] Re: rule chaining
Next by Date: [ossec-list] Re: Monitoring Cisco network devices using OSSEC HIDS
Previous by thread: [ossec-list] Re: Replaying old logs
Next by thread: [ossec-list] Email_alerts
Index(es):
- Date
- Thread

OSSEC home | Main Index | Thread Index

OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.