how to remove existing logs..because my web page is hanging also i want to know the options of "ossec-logtest"
i want to demonstrate a file change alert (/etc/shadow)..i found that /etc is included in ossec.conf but after i made some change in /etc/shadow file, i didn't get alert..what's wrong.? Thanks Ben
