On 01.10.2013 10:45, Roy Feintuch wrote:
Dan, I would like to note that I have never seen a file deleted event
fired without realtime=true.
I have also verified it by deleting a file when ossec agent was down.
This file was never reported as deleted again even after full scans
(unlike new files / updated file - that were reported after the full
scan)
Can you please file a bug report
https://bitbucket.org/jbcheng/ossec-hids/issues/new)?
--
---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
