Email alert doesn't show the changes, but the alert.log is work.
*Email* > > OSSEC HIDS Notification. > 2018 Nov 12 16:01:49 > Received From: (nagios-server185) xxxxxxx->syscheck > Rule: 550 fired (level 7) -> "Integrity checksum changed." > Portion of the log(s): > Integrity checksum changed for: '/home/hehe.txt' > > > --END OF NOTIFICATION *.../alerts/alert.log* ** Alert 1542009709.59473: mail - ossec,syscheck, > 2018 Nov 12 16:01:49 (nagios-server185) xxxxxxx->syscheck > Rule: 550 (level 7) -> 'Integrity checksum changed.' > Integrity checksum changed for: '/home/hehe.txt' > *Permissions changed from 'rwxr--r--' to 'rwxr-xr-x'* -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
