Thanks cnk! I meant especially files of the different OS (e.g. Windows and Linux). If registry changes could be tracked the same way, much the better. (my idea was, that OSSEC agents are in charge to monitor such changes..)
Additional feedback is appreciated! John On Tue 9.06.2009 11:30 , cnk [email protected] sent: > > Hey John, > > Can you give some more details of what you're looking for? By > "monitored objects" do you mean file/registry changes from > syscheck? > cheers, > > cnk > > On Tue, Jun 9, 2009 at 3:00 AM, uestadt.ch> wrote:> > > > > Hello > > > > As I understand, Splunk does everything that WUI > is able to do..> > > > > Question: > > Is it possible to make a timeline of the > monitored objects (by an OSSEC agent)> within Splunk? > > > > > > Thanks a lot in advance for any > feedback!> > > John > > > > > > > > > > > > > > > > > > >
