|
Hello, First of all thanks for all the work on ossec. It’s
a great product. I have two questions regarding the syscheck portion of
the product. 1.
In the syscheck database it is recording the uid
and gid of each file entered. Is it possible to modify the notifications to
include these in file modification and creation notifications? 2.
Is it possible to run the syscheck daemon in an active
mode so it detects new files instantly, instead of running it periodically to
detect them? Thanks a lot, Nick Consolo
The information contained in this message is privileged and confidential. It is intended only for the recipient or entity listed above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by replying to the message and promptly deleting it from your computer. Thank You. |