Hey guys,

Is there a specific command or flag in agent_control or
syscheck_control that will display the actual changes to a file where
report_changes was set to "yes" ?


Or do I just have to go into the "/var/ossec/queue/diff/local/*"
directory and view the changed files myself?



Thanks!

Reply via email to