Hi Marcelo, The "name" option is used as a pattern match, so "c1" will match "c1" and "c1-devel". If you want it to match only "c1", you need to specify: "^c1$":
<agent_config name="^c1$"> .. Hope that helps. -- Daniel B. Cid dcid ( at ) ossec.net On Tue, Mar 30, 2010 at 5:04 PM, Marcelo de Miranda Barbosa <[email protected]> wrote: > Hello, > I think that exist a bug in centralized configuration: > My Configuration shared/agent.conf: > <agent_config name="c1"> > <syscheck> > <directories check_all="yes">/home/samba/users</directories> > </syscheck> > </agent_config> > <agent_config name="c1-devel"> > <syscheck> > <directories check_all="yes">/home/oracle/product</directories> > </syscheck> > </agent_config> > I am using ossec 2.3 in server and in two agents. (server itanium with RHEL > 5 and agents, c1 (Debian Etch - 4.0 ) c1-devel (Debian Sarge). > Problem: in server c1-devel the directory /home/samba/users is initializing > togheter with directory /home/oracle/product. > Actions: > * I tried use space in name of server c1, ie. agent_config name="c1 " > configuration of agent did not work for the agent c1 (agent.conf). > * I tried use pipe with a name of the server that does not exist, ie: > agent_config name="c1|XXXXX", same initial symptom for server c1-devel. > Is there any configuration id to agent_config ? > > Thank You. > Marcelo -- To unsubscribe, reply using "remove me" as the subject.
