Hello,

 

First of all thanks for all the work on ossec.  It's a great product.  I
have two questions regarding the syscheck portion of the product.

 

1.        In the syscheck database it is recording the uid and gid of
each file entered.  Is it possible to modify the notifications to
include these in file modification and creation notifications?



2.       Is it possible to run the syscheck daemon in an active mode so
it detects new files instantly, instead of running it periodically to
detect them?

Thanks a lot,

 

Nick Consolo




****************************************************************************
The information contained in this message is privileged and 
confidential. It is intended only for the recipient or entity listed above. 
If the reader of this message is not the intended recipient, you are 
hereby notified that any dissemination, distribution, or copying of this 
message is strictly prohibited. If you have received this message in error, 
please notify the sender immediately by replying to the message and promptly 
deleting it from your computer. Thank You.
****************************************************************************

Reply via email to