Hello,
Is there a way to have reportd to not "cutt" long paths , it seems to have a max character limitation. For example output of "zcat logs/alerts/2011/Dec/*.gz | bin/ossec- reportd -n "Month Summary" 2>" is showing like : Top entries for 'Filenames': ------------------------------------------------ /etc/utmp |17 | /etc/opt/resmon/log/registrar.log |9 | /etc/opt/resmon/log/registrar.log.old |6 | /etc/security/lastlog |6 | /opt/ossec/etc/ossec.conf |6 | /var/ossec/etc/ossec.conf |6 | HKEY_LOCAL_MACHINE\Security\SAM\Domains\Acco.. |6 | HKEY_LOCAL_MACHINE\Software\Microsoft\Window.. |6 | HKEY_LOCAL_MACHINE\Software\Microsoft\Window.. |6 | HKEY_LOCAL_MACHINE\Software\Microsoft\Window.. |6 | HKEY_LOCAL_MACHINE\Software\Policies\Microso.. |6 | HKEY_LOCAL_MACHINE\Software\Policies\Microso.. |6 | HKEY_LOCAL_MACHINE\System\CurrentControlSet\.. |6 | HKEY_LOCAL_MACHINE\System\CurrentControlSet\.. |6 | So from the report it is not possible to see what the full name is . In this example it could be anything under HKEY_LOCAL_MACHINE\Software \Microsoft\Window... Thank you
