My ossec does not report new files when they are created even though I have this in the agent ossec.conf file
<syscheck> <!-- Frequency that syscheck is executed - default to every 22 hours --> <frequency>79200</frequency> <alert_new_files>yes</alert_new_files> Am I missing anything here? Also, how can I exclude a directory name using regular expressions from file change check? Thank you, Abdellah