On 28.06.2013 16:09, David Blanton wrote:
Okay thanks Dan.

So it seems like I need to use cron to have OSSEC restart every day in
order to check the updated dir for the batches.

I will test and report.

Another approach would be to have OSSEC monitor for new files and then have an active response which restarts the OSSEC agent. If you have a somewhat short syscheck scan interval then you can automatically be monitoring new files pretty quickly.

--

--- You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to