Hi,
Thank you for your answers.
Is it possible to group all alerts for agent in one alert mail?
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to
Hello,
ossec.conf should only affect the local installation (manager or client),
for centralized agent configuration modify /var/ossec/etc/shared/agent.conf
on the manager.
see also:
https://ossec-docs.readthedocs.io/en/latest/manual/agent/agent-configuration.html
regards,
0x2a
On Mon, Jun 19,
Hi,
Thanks for your answer.I edited manager ossec.conf and add same config in
it. Agents syscheck worked in 24 hours after create first database.But
manager not run shscheck after 24 hours of database initialization. Does
configuration in manager ossec.conf affects agents?
Thanks for reading.
Hi,
you can find information about the precedence of* agent.conf *and
*ossec.conf*
here:
https://documentation.wazuh.com/current/user-manual/reference/centralized-configuration.html#precedence
The *alert_new_files *setting is only valid for manager.
keep in mind that the first time that
