There is no easy way to do this currently ( https://www.ossec.net/docs/manual/syscheck/index.html#how-do-i-stop-syscheck-alerts-during-system-updates )
In the future you may be able to pull down the checksums for all package updates listed in repodata (on at least rpm distros) and then use a list to ignore changes matching those checksums. On Thu, Apr 2, 2020 at 11:43 AM Carlos Islas <sparks.10008...@gmail.com> wrote: > Hello > > Somebody have any suggestion? > > El miércoles, 1 de abril de 2020, 8:12:08 (UTC-6), Carlos Islas escribió: >> >> Good day community. >> >> I need to stop the alerts for specific hosts , for example when we update >> the OS or when we made maintenance window. How can we do that? I don't know >> if I explain :) >> >> I appreciate your help >> >> Regards >> > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/e4bd7428-9571-479e-9ab4-aef559fdfcd9%40googlegroups.com > <https://groups.google.com/d/msgid/ossec-list/e4bd7428-9571-479e-9ab4-aef559fdfcd9%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAPR9YNQr23j-5HP2sjR_F9ZhDA4WaLuu1CjZRS-J4JFsKdigQA%40mail.gmail.com.