On Sun, Apr 13, 2014 at 8:45 PM, Braiant Giraldo <[email protected]> wrote: > > ok, that's clear but How can I edit the message alert to include that kinf of > information? >
Since I have no experience with this, it's a guess. Create a rule for the log message created when a user edits a file. You can even create a decoder to pretty it up a bit. > > > 2014-04-09 16:35 GMT-05:00 Michael Starks <[email protected]>: > >> On 2014-04-08 15:44, Brian Giraldo wrote: >>> >>> Hello >>> >>> I have a question, can I edit a rule and alert to include information >>> about who made a change on a file? >> >> >> You would have to use your system auditing function for that and likely >> create custom rules. >> >> >> -- >> >> --- You received this message because you are subscribed to the Google >> Groups "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/d/optout. > > > > > -- > > > Braiant Giraldo | Ingeniero de Proyectos | (+57-1) 743 4610 | > [email protected] | Carrera 12 No. 71-32 Of. 404, Bogotá, Colombia | > > > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
