Juhuuuu! Does the ossec-logcollector proccess tire to reopen files defined in primary configuration file or not? There is an option "logcollector.open_attempts" which defines the number of attempts to open files but the manual does not specify when this is done (during start or during the lifespan of this process)
The problem I'm trying to solve is that there is need to monitor set of files which might not exist when ossec-logcollector stars but I'm not sure (as the manual is not detailed enough) if the agent can reopen missing files during normal operations or do I need to restart agent every time defined files appears on file system? J.
