Re: [ossec-list] Monitor Particular Folder On Windows Agent

On Wed, Jul 19, 2017 at 11:46 AM, Akash Munjal wrote: > Hi All, > > Can I monitor a particular folder on desktop of my windows agent. > > If yes then how it can be done. Also I want to monitor a particular > drive(:C). > Define "monitor." Do you mean syscheck

Re: [ossec-list] ossec-agent buffer and/or cache configurations

Hello Grant, OSSEC tracks logs from the file end when it starts. I mean, when OSSEC starts it opens every monitored file and jumps to the current file end. >From that moment on it will report all new data arriving to the log. If OSSEC detects that a log was rotated, it re-opens the file and

[ossec-list] ossec-agent buffer and/or cache configurations

Two specific questions Are the amount of logs cached/tracked configurable? (Specifically for linux agents) when the agent cannot reach the ossec-server (yes I read the discussion from 2010, looking for updated thoughts here) How, specifically, does the agent handle being down/restarted? For

[ossec-list] Monitor Particular Folder On Windows Agent

Hi All, Can I monitor a particular folder on desktop of my windows agent. If yes then how it can be done. Also I want to monitor a particular drive(:C). thanks... -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this