My ossec does not report new files when they are created even though I have
this in the agent ossec.conf file

<syscheck>
    <!-- Frequency that syscheck is executed - default to every 22 hours -->
    <frequency>79200</frequency>
    <alert_new_files>yes</alert_new_files>

Am I missing anything here? Also, how can I exclude a directory name using
regular expressions from file change check?

Thank you,
Abdellah

Reply via email to