I didn't find " restrict=" in the OSSEC book, the manual, or the wiki. I
think I can make good use of it, so thanks, Mike, for showing it!
And sorry for keeping this thread slightly off topic.
-Bill
You can also use restrict=".asp" to only monitor those files...
c:\inetput/
Thanks,
On Thu, Jan 20, 2011 at 3:13 PM, dan (ddp) wrote:
> Hi Mike,
>
> On Thu, Jan 20, 2011 at 12:50 PM, Mike Smith wrote:
>> Hello,
>>
>> I would like to know how i can get ossec to alert me any time a find with
>>
Hi Mike,
On Thu, Jan 20, 2011 at 12:50 PM, Mike Smith wrote:
> Hello,
>
> I would like to know how i can get ossec to alert me any time a find with
> the extention of .asp is placed with the c:\inetoub directory running
> windows server 2003.
>
> c:\inetpub/*.asp or how do you do
> it with a file
Hello,
I would like to know how i can get ossec to alert me any time a find with
the extention of .asp is placed with the c:\inetoub directory running
windows server 2003.
c:\inetpub/*.asp or how do you do
it with a file ext like .asp can you do *.asp or ,asp$
Also, what frequency can I set, can
Truncating the tables would empty it without needing to recreate it.
-Original Message-
From: ossec-list@googlegroups.com [mailto:ossec-list@googlegroups.com]
On Behalf Of dan (ddp)
Sent: Thursday, January 13, 2011 2:10 PM
To: ossec-list@googlegroups.com
Subject: Re: [ossec-list] How to
On Thu, Jan 13, 2011 at 10:28 AM, Devendra Agrawal
wrote:
> Hi,
>
> How can i urge the Ossec mysql Database?
Without digging into the sql, you can drop the database and recreate it.
Hi,
How can i urge the Ossec mysql Database?
