When I run syscheck_control –i on a specific agent it is displaying the incorrect time. It is displaying the time the report ran for the Linux boxes and for the Windows boxes it is displaying some random time sometimes time stamped after the time the report runs.
The files were modified on 8/28/14 and it is displaying 8/29/14. And when ossec-syscheckd runs it reports that the file changed after the time stamp that the report ran. That definitely isn’t possible. So, I am wondering if there is something I can do for it to: write the date modified to the database and then when the report is ran it displays the time the file was modified and not the time the report ran or whatever it is actually displaying. Thanks, Bon -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
