Hi
everybody,
I have 14 OSSEC
Agents, version 0.9.2. On each of them Syscheck is "heavily" configured
(checking "all" on many directories). But no alerts yet, after several
weeks.
So, I would like to
know how to check what's wrong:
-
I put sysckeck debugging to 1 for some agents
-
where should be stored checksum database (agent, server, which file) ? If
database doesn't exist, what could be the problem ?
-
.....?
In Agents and Server
logs, I don't have any errors, and other alerts are ok.
Thanks very
much.
Fred
