I am absolutely sure that my test directory is monitoring,i changed
some files and got a e mail report about md5/sha hash. It's not
alerting only about new files. Maybe problem in the name of syscheck
databse file?
My part of .conf
  <directories check_all="yes">C:\1</directories>
i will try to make a universe conf for monitoring all agents from
manager in /var/ossec/etc/shared maybe it solve my problem.

Reply via email to