El miércoles, 3 de octubre de 2012 10:55:47 UTC-5, Alejandro Martinez escribió: > > Hi all, > > I've googled how to recognize 560 events when then object audit in windows > is turned on (create/modify/delete file on folder). > > I see the log coming from the agent in /var/ossec/logs/alert.log but I > can't yet to get logged on a mysql backend. > Everything else is working fine. > > I've tested with local_rules,xml but nothing. > > Maybe I'm missing something. > > Thanks all >
Good you need to have installed a mysql ossim data for this event and if this is how I install the database thanks -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
