I think this seems to be a probabale solution. Will check the same once and get back on this.
Thanks From: [email protected] [mailto:[email protected]] On Behalf Of Christopher Moraes Sent: Thursday, December 09, 2010 2:53 AM To: [email protected] Subject: Re: [ossec-list] Running Integrity Checking at different Instances syscheck has a "-c" option to specify a config file when it is run. You can try setting up a cron job that will run syscheck every 3 hours and specify a control file that contains the list of the 3 files you want to check. Put the other files in the ossec.conf file. Just a thought, I haven't tried this. On Wed, Dec 8, 2010 at 3:57 PM, tanishk lakhaani <[email protected]> wrote: Hi People !!! Can we tweak OSSEC to run integrity checking for different file fat different instances. I mean to say: suppose I have 6 files to monitor for Integrity checking.. I want that the integrity checking on 3 of them to be in every 3 hours, whereas for the rest to be every 10 hours. Any idea, if I can tweak it like this. Regards Tanishk
