Re: [ossec-list] Auto Ignore Issue in agent.conf

On Wed, Apr 27, 2016 at 11:09 AM, sandeep wrote: > > Thanks Dan for the reply. So just to conclude, auto_ignore option cannot be > used in the agent.conf and is only applicable to ossec.conf server/local > installations right ? > Correct. > -- > > --- > You received

Re: [ossec-list] Auto Ignore Issue in agent.conf

Thanks Dan for the reply. So just to conclude, auto_ignore option cannot be used in the agent.conf and is only applicable to ossec.conf server/local installations right ? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe

Re: [ossec-list] Auto Ignore Issue in agent.conf

On Wed, Apr 27, 2016 at 10:54 AM, sandeep wrote: > Hello All, > > We used the auto_ignore option in agent.conf file and when the OSSEC service > was started on the agents it stopped monitoring the directories saying > "syscheck is disabled" in the ossec.log file. >

[ossec-list] Auto Ignore Issue in agent.conf

Hello All, We used the *auto_ignore option in agent.conf* file and when the OSSEC service was started on the agents it stopped monitoring the directories saying *"syscheck is disabled"* in the ossec.log file. 2016/04/27 10:40:05 ossec-agent: Starting syscheckd thread. 2016/04/27 10:40:05

Re: [ossec-list] auto-ignore

One more question! if i have server agent environment then do i need to add auto-ignore on every client or just server ? -Satish On Fri, Apr 1, 2011 at 5:11 PM, satish patel satish...@gmail.com wrote: Thanks for inform! I would like to have unignored option (Like timeout)  in future

[ossec-list] auto-ignore

Hey Guys! what is the default threshold of auto-ignore ? And if it start ignore then is there any time period it reset and start alerting again ? Otherwise it could be dangerous... -S

Re: [ossec-list] auto-ignore

3 file changes and it's auto ignored. It does not become unignored automatically. Pay attention to your system or turn off auto-ignoring. On Fri, Apr 1, 2011 at 10:38 AM, satish patel satish...@gmail.com wrote: Hey Guys! what is the default threshold of auto-ignore ?  And if it start ignore

Re: [ossec-list] auto-ignore

Thanks for inform! I would like to have unignored option (Like timeout) in future version. -Satish On Fri, Apr 1, 2011 at 3:53 PM, dan (ddp) ddp...@gmail.com wrote: 3 file changes and it's auto ignored. It does not become unignored automatically. Pay attention to your system or turn off