Okay I'll give this a shot. Thanks Dan. I appreciate all the help. So it seems the only reason someone would ever do this in agent.conf is if they have different OS's to monitor and don't want to put false directories?
<agent name=" "> ect. If a directory does not exist on a certain system, will there be an error? Or do you think it would be best to list every agent and specify which directories to monitor -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
