i'm absolutely shure that test directory is monitoring. i changed some files and get a e-mail report about changing of md5/sha hashes. Part of .conf <directories check_all="yes">C:\1</directories>. Maybe problem in the name of syscheck database file? I'll try to make a universe agent.conf file in ossec/etc/shared maybe it solve the problem.
- [ossec-list] new file alert problem Daniel Shreterford
- Re: [ossec-list] new file alert problem dan (ddp)
- Re: [ossec-list] new file alert problem Daniel Shreterford
- Re: [ossec-list] new file alert problem Daniel Shreterford
- Re: [ossec-list] new file alert proble... dan (ddp)
- [ossec-list] Re: new file alert p... Daniel Shreterford
- [ossec-list] Re: new file alert p... Daniel Shreterford
