Hi Patrick, On Wed, Jan 19, 2011 at 4:14 PM, Patrick Melvin <[email protected]> wrote: > Hello, I haven't had much luck finding these answers searching with > google, but I may not be using the correct search terms. The > questions below are in regards to File Integrity Monitoring Scans. > > 1) Does the Server or Agent initiate the scan? >
Each system initiates its own scan. > 2) Does the Agent use the settings from it's own ossec.conf (for > instance, in windows: C:\Program Files\ossec-agent\ossec.conf) or does > it use the settings from the servers ossec.conf (i.e. How often to > run, what files/directories to monitor/ignore)? > Each system uses its own ossec.conf (and/or agent.conf in the case of agents and the use of the agent.conf). > Thanks in advance, > Patrick >
