P.S.: This is a duplicated topic.
There is a more detailed explanation to your problem at the other topic:
https://groups.google.com/forum/#!topic/ossec-list/eSbdMTPLG7A
Regards.
On Friday, April 1, 2016 at 3:17:24 PM UTC+2, Victor Fernandez wrote:
>
> Hi.
>
> I did the same as you: changed
Hi.
I did the same as you: changed the rule's level from 0 to 10 and added
yes
on "ossec.conf", both at server, and I had no error.
You should check the Syscheck database (tail of file at
/var/ossec/queue/syscheck) and verify that new files are on it.
Depending on whether the file appears in
