The syscheck db is stored in queue/syscheck, no where else that I know of. The fact the entry is in the db shouldn't matter though.
On Fri, Jul 8, 2011 at 11:46 AM, Reg <regoma...@gmail.com> wrote: > It's a directory. What is puzzling me is why I do not have this issue with > new agents. That directory > exists on all the hosts. Is there somewhere other than > /var/ossec/queue/syscheck where this data > is stored? The syscheck database was created before I added in the ignore > option for that directory. > I'll try the type option to see if it helps. > -Reg
