Re: [ossec-list] Re: Stop alerting

2020-04-02 Thread Zach Vanderbilt
There is no easy way to do this currently (
https://www.ossec.net/docs/manual/syscheck/index.html#how-do-i-stop-syscheck-alerts-during-system-updates
)

In the future you may be able to pull down the checksums for all package
updates listed in repodata (on at least rpm distros) and then use a list to
ignore changes matching those checksums.

On Thu, Apr 2, 2020 at 11:43 AM Carlos Islas 
wrote:

> Hello
>
> Somebody have any suggestion?
>
> El miércoles, 1 de abril de 2020, 8:12:08 (UTC-6), Carlos Islas escribió:
>>
>> Good day community.
>>
>> I need to stop the alerts for specific hosts , for example when we update
>> the OS or when we made maintenance window. How can we do that? I don't know
>> if I explain :)
>>
>> I appreciate your help
>>
>> Regards
>>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-list+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ossec-list/e4bd7428-9571-479e-9ab4-aef559fdfcd9%40googlegroups.com
> 
> .
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ossec-list/CAPR9YNQr23j-5HP2sjR_F9ZhDA4WaLuu1CjZRS-J4JFsKdigQA%40mail.gmail.com.


[ossec-list] Re: Stop alerting

2020-04-02 Thread Carlos Islas
Hello

Somebody have any suggestion?

El miércoles, 1 de abril de 2020, 8:12:08 (UTC-6), Carlos Islas escribió:
>
> Good day community.
>
> I need to stop the alerts for specific hosts , for example when we update 
> the OS or when we made maintenance window. How can we do that? I don't know 
> if I explain :)
>
> I appreciate your help
>
> Regards
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ossec-list/e4bd7428-9571-479e-9ab4-aef559fdfcd9%40googlegroups.com.