OSSEC has now identified the file changes, but not on the first run of
syscheck.
Could there be some kind of initial processing, like the setting up of
a database of files to be monitored, that has to complete before the
checks can run?

Reply via email to