Yup, you're right, we don't run 2.7. We work directly off Dani's build.. which is slight different, its the one he makes all his updates to and fixes the bugs we find... think its stripped of a few 2.7 features as well.
As for working for us, haven't tested in a while we've been trying to tackle the issue from a different angle and relooking at the entire syscheck component.. On Sunday, July 28, 2013 11:25:08 AM UTC-7, Michael Starks wrote: > > On 07/28/2013 01:14 PM, Michael Starks wrote: > > On 07/27/2013 07:17 PM, perezbox wrote: > >> Hey Mike > >> > >> Yup, we're aware of it. The issue we have had with it is it's just too > >> noisy.. and its disabled by default.. it also has issues handling > >> subdirectories... :( > > Btw, I was tailing the syscheck queue and archives.log when I created > the file and saw nothing, so the issue may be on the agent. > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
