Hello, I found something weird, if i move in a agent to the path where ossec was intalled in the folder share
C:\Program Files (x86)\ossec-agent\shared i can find the agent.conf that i configured in the manager. But if I open the agent and go to menu View>View config, the configuration showed is not the same like the path share. This is correct? Regards... El martes, 22 de mayo de 2018, 16:08:46 (UTC-5), Carlos Islas escribió: > > Hi dan, > > That is my configuration: > > <ignore>E:\Program Files (x86)\Websense\Web > Security\bin\postgres\data\base</ignore> > <ignore>E:\Program Files (x86)/Websense/Web > Security/bin/postgres/data/base</ignore> > > But i keep receiving alerting email: > > Integrity checksum changed for: 'E:\Program Files (x86)/Websense/Web > Security/bin/postgres/data/base/16384/16469.3' > > Size changed from '217948160' to '328515584' > > > Do you have an idea about what is happening? > > > =( > > > Regards. > > > El lunes, 23 de abril de 2018, 17:30:26 (UTC-5), dan (ddpbsd) escribió: >> >> On Thu, Apr 19, 2018 at 1:36 PM, Carlos Islas <sparks....@gmail.com> >> wrote: >> > Hello to everybody >> > >> > I have this exclusion in my agent.conf: >> > >> > <ignore>C:\Program Files (x86)\ossec-agent\rids</ignore> >> > >> >> Try: >> <ignore>C:\Program Files (x86)/ossec-agent/rids</ignore> >> >> > But i continue receiving email notifications. Is necesary "escaped" the >> > space? >> > >> > Thanks to all! >> > >> > Regards >> > >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google >> Groups >> > "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> an >> > email to ossec-list+...@googlegroups.com. >> > For more options, visit https://groups.google.com/d/optout. >> > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
