On 2014-04-03 6:45, Teymur Alizade wrote:
Good Day,
But when there are a
lot of changes, we receive information in cut off form. For example I
know that in ASA there was 30 new access lists, we receive information
abot 17 access lists. Can you please help me with this problem?
This is by design. Alerts are intentionally limited so you don't get
huge emails. When this happens, there will be a "More changes..." at the
bottom of the alert, which is your queue to look at the diff on the
manager to see what really changed. The only option to change this
behavior is to edit the code.
Also, keep in mind that you may see lines in the alert/diff that did not
really change if you use the ASDM. More info here:
https://github.com/ossec/ossec-hids/issues/168
--
---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
