On 28.06.2013 16:09, David Blanton wrote:
Okay thanks Dan.
So it seems like I need to use cron to have OSSEC restart every day
in
order to check the updated dir for the batches.
I will test and report.
Another approach would be to have OSSEC monitor for new files and then
have an active response which restarts the OSSEC agent. If you have a
somewhat short syscheck scan interval then you can automatically be
monitoring new files pretty quickly.
--
---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.