Hi, I have configurated my windows-agent to monitor changes for the abc-Directory on real time:
<directories check_all="yes" report_changes="yes" realtime="yes">c:\abc</directories> When I change the file abc.txt on this directory, ossec generates an alert correctly, but although writes an error into ossec.log on the agent. 2015/11/01 18:50:57 ossec-agent(1107): ERROR: Unable to create directory: '/var/ossec/queue/diff/local/:\abc' 2015/11/01 18:50:57 ossec-agent(1124): ERROR: Unable to rename file: 'c:\abc/abc.txt'. How can I solve this? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
