[ossec-list] Real time monitoring

[Mike Smith]

Hello,

I have my agent working again.  Now the reason for the whole upgrade to get
real time monitoring working.

Is this the right way to do it for a windows agent

<syscheck>
    <directories realtime="yes" check_all="yes">c:\inetpub/</directories>
    <directories check_all="yes">c:\inetpub/</directories></syscheck>

or this way

<syscheck>
    <directories realtime="yes"
check_all="yes">c:\inetpub/</directories></syscheck>

Thanks,



Mike