The line was added to the ossec.conf on the agent side. It is simply:
ignore/var/www/web-data/ignore
This is in syscheck/syscheck
Yet an lsof currently shows:
64 /var/www/web-data/vhosts/torrey21.com
ossec-sys 6090 root 12r DIR 0,24 8192
963714
Justice
Hey,
Can you show what you added to ossec.conf? Note that you need to add
the ignore directly
on the agent's ossec.conf and not on the manager side.
Thanks,
--
Daniel B. Cid
dcid ( at ) ossec.net
On Wed, Jul 15, 2009 at 1:57 PM, Justice Londonjlon...@lawinfo.com wrote:
I am trying to get
