D'oh, I found out... It's fault of quotes -_-' >>> <agent_config os=”Linux">
” != " It's probably because I took an example from web (formated html text), and closed quote using 'vi' And I've find another problem, on middle of agent.conf: <agent_config name="SRV001"> <agent_config name="SRV001"> [...] </agent_config> Sorry, my bad. Btw, ossec doesnt have a parser for agent.conf file?? Thanks / Valeu, Daniel. On Fri, Jan 8, 2010 at 4:04 PM, Daniel Cid <[email protected]> wrote: > Hi Carlos, > > Yes, it should work in there. Did you restart the agent after making > the change? > > Thanks, > > -- > Daniel B. Cid > dcid ( at ) ossec.net > > > 2010/1/7 Carlos André <[email protected]>: >> Any idea? >> >> 2010/1/4 Carlos André <[email protected]>: >>> Hi ppl, >>> I'm trying to ignore some dirs to my all Linux machines, w/o success. >>> There my agent.conf: >>> >>> <agent_config os=”Linux"> >>> <syscheck> >>> <ignore>/etc/testdir</ignore> >>> </syscheck> >>> </agent_config> >>> >>> >>> Syscheck option "ignore" doesnt work for agent.conf ? or I doing >>> something wrong??? >>> >>> Thanks >>> >> >
