I'm not sure of a way to do this purely with ossec, but you could write a script to check on what you want. Then pipe the script output through logger to get it into syslog, and write an ossec rule to alert on messages from the script.
On Tue, Jun 30, 2009 at 7:30 AM, Peter M. Abraham<[email protected]> wrote: > > Greetings: > > Anyone? > > Thank you. >
