so i can't interact with the file that triggered the alert? seems kinda pointless then
El martes, 7 de febrero de 2017, 18:45:39 (UTC+1), Nil escribió: > > Hi, I would like to know how can i reference the file that triggered an > alert in order to use it with the commands > i.e If file X were modified, I would like to do a `cp /full/path/of/X > /some/other/path` > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
