[ossec-list] Re: Active Response

[Peter M. Abraham]

Greetings Adriel:

Presuming active response is turned on, then check /var/ossec/logs/
active-responses.log on the server (agent or local) for activity.

Thank you.
> 1KDownload