Notifications are usually sent out after the next syscheck run, unless you're using the realtime option.
On Tue, Jun 7, 2011 at 8:30 AM, Shashank Kamble <[email protected]> wrote: > Hi all, > > I am new to ossec and I am having some issues with it. > > I updated the agent.conf file to monitor few windows and Linux directories. > But, for some odd reason, sometime ossec does inform me that the files have > changed (if there is any) and sometime it does not. Also, sometime I get the > notification after couple of days of file changed. > > Do I have to make any changes in the conf file or anywhere else? Could you > guys please help me with this issue? > > thanks, > > Shashank > > > >
