Re: [ossec-list] Enable only syscheckd for FIM

2017-03-03 Thread Sam Gardner
minimal footprint, OSSEC may not be the package for them. Projects > like Aide are great at what they do without the fluff. > But that kind of decision is very project/requirement specific, so > don't consider this a professional opinion. :-) > > > On Thu, Mar 2, 2017 at 4:44 PM, dan

Re: [ossec-list] Enable only syscheckd for FIM

2017-03-06 Thread Sam Gardner
seem to do the trick. On Saturday, March 4, 2017 at 12:12:49 PM UTC-6, dan (ddpbsd) wrote: > > On Fri, Mar 3, 2017 at 5:29 PM, Sam Gardner <lwne...@gmail.com > > wrote: > > Thanks for the info - I'd like to explore what I can actually do with > OSSEC > > and

[ossec-list] Enable only syscheckd for FIM

2017-03-02 Thread Sam Gardner
Hi All - I'd like to run only the syscheck subsystem in order to provide FIM. I don't see anything in the docs that immediately appears to do what I want - is there any way to run syscheckd in "standalone" mode or only alongside analysisd? Thanks, Sam Gardner -- --- Yo