Hello, I think that exist a bug in centralized configuration:
My Configuration shared/agent.conf: <agent_config name="c1"> <syscheck> <directories check_all="yes">/home/samba/users</directories> </syscheck> </agent_config> <agent_config name="c1-devel"> <syscheck> <directories check_all="yes">/home/oracle/product</directories> </syscheck> </agent_config> I am using ossec 2.3 in server and in two agents. (server itanium with RHEL 5 and agents, c1 (Debian Etch - 4.0 ) c1-devel (Debian Sarge). Problem: in server c1-devel the directory /home/samba/users is initializing togheter with directory /home/oracle/product. Actions: * I tried use space in name of server c1, ie. agent_config name="c1 " configuration of agent did not work for the agent c1 (agent.conf). * I tried use pipe with a name of the server that does not exist, ie: agent_config name="c1|XXXXX", same initial symptom for server c1-devel. Is there any configuration id to agent_config ? Thank You. Marcelo
