Thanks Dan! >> Did you try it? Did it work? (did you remember to turn on new file >> alerts on the server?)
Yes, I tried it after I posted and it works. Matching rule 555. I was kinda expecting rule 554 to fire but I guess you get that on agent installations. >> No. It can be used in local, agent, and server installations. It will >> not work with agentless installs. Noted. Thanks! Have a good weekend!! -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
