Right now I am the only "email_to" (in the global section) for our ossec server. I have a admin who wants to be notified when a directory changes. I've read the granular email wiki and the realtime file monitoring section, but I'm wanting advice on the "correct" way to implement this. I could probably fudge something that works, but I'm sure someone else has done this.
thanks mjw
