On Fri, Dec 28, 2018 at 5:47 PM <rcharte...@gmail.com> wrote: > > Anyone, > > CentOS 7.6 > Ossec 3.1.0 > > I am looking to monitor for deleted files without realtime enabled. Does > anyone know how I can get ossec to notify on deleted files without realtime > enabled in 3.10. > > I have seen threads about this dated back to 2014. Is realtime a requirement > to get notifications about deleted files? > > What I would like to do is run a successful syscheck, delete the files and > run another successful syscheck and be notified in the alerts.log about the > deleted files. >
I'll test it. > Thanks in advance > > > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
