[ossec-list] Newby question

I have added to /var/ossec/etc/shared/agent.conf a profile for a class of machine and updated the agent's ossec.conf with the config-profile in the block. Do I need to remove the , and all entries on the client or will the manager simply override them? Is the result "either (the manager

Re: [ossec-list] Is a "percent change" criteria available?

On Aug 21, 2017 4:58 PM, "Leroy Tennison" wrote: I'm hoping to implement a constraint where, if disk space used (on a specific tree such as /home) changes by more than a certain percent then it will trigger an alert. I have a controlled environment (PCI) where delta