i'm absolutely shure that  test directory is monitoring. i changed
some files and get a e-mail report about changing of md5/sha hashes.
Part of .conf   <directories check_all="yes">C:\1</directories>.
Maybe problem in the name of syscheck database file?
I'll try to make a universe agent.conf file in ossec/etc/shared maybe
it solve the problem.

Reply via email to