[ossec-list] Alerts on log file modified, but not if added to

[Lars Oberg]

Hello,

How can I configure ossec to alert me if somebody tampers with a log file?
In other words, I do not want to get alerts anytime something is added 
to the log, but I want to get alerts if existing contents in the log 
file is modified or deleted.

Thanks,
Lars