Re: [ossec-list] Expected behaviour of syscheck

Hi, The configuration parser allows multiple definitions of . OSSEC reads the *ossec.conf* file first, and then *agent.conf* (only in agents). The option is aggregable so all directories specified will be monitored. On the other hand, value-based options (like ) are overwritten. So the option

Re: [ossec-list] Expected behaviour of syscheck

On Wed, Feb 21, 2018 at 2:18 PM, Jorge Martins wrote: > Hi, > > > Why wonder if this is the expected behaviour for syscheck > > > I tried having 2 differents frequencies so I tested by adding 2 entries of > on the ossec.conf, one having a 5 minutes frequency and other 2

[ossec-list] Expected behaviour of syscheck

Hi, Why wonder if this is the expected behaviour for syscheck I tried having 2 differents frequencies so I tested by adding 2 entries of on the ossec.conf, one having a 5 minutes frequency and other 2 minutes. no 300 E:/syscheck1 no 120 E:/syscheck2