The OSSEC processes all restarted properly? Did the binaries actually change?
On Thu, Oct 28, 2010 at 12:45 PM, reg <[email protected]> wrote: > My second question has to do with this article. > > http://www.immutablesecurity.com/index.php/2010/10/20/2woo-tips-tricks/ > > I made the changes that are supposed to change the detail level alert > subject line but my alerts > are still in the old format. Any ideas? > > -R > > On Oct 28, 12:36 pm, reg <[email protected]> wrote: >> Hello, >> >> I recently updated to 2.5.1, and I have been trying to get >> report_changes working with syscheck. >> >> I have this working, and the alerts do contain the diff, but I am >> unsure where this is stored on the server. >> Can someone point me to where the data is stored? I tried looking in >> the queue/syscheck dir but the only >> files I saw there contained just a list of checksums. >> >> -R
