On 11/13/2014 11:24 AM, [email protected] wrote: > > > Le jeudi 13 novembre 2014 17:50:42 UTC+1, dan (ddpbsd) a écrit : > > On Thu, Nov 13, 2014 at 11:48 AM, <[email protected] <javascript:>> > wrote: > > Hello > > > > I want to ignore alerts when my client OSSEC reboots. > > What is a syntax? > > > > Which alerts specifically? Or all alerts after a reboot? > > > All alerts of (checksum changed) during reboot.
Try setting scan_on_start to no http://ossec-docs.readthedocs.org/en/latest/manual/syscheck/ -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
