On Fri, Apr 10, 2015 at 3:09 AM, Matthias Fraidl <[email protected]> wrote: > hi list, > > i'm using ossecs ability to monitor the output of commands, so far it > works pretty well, but what i want to know is how often will the command > <localfile> > <log_format>full_command</log_format> > <command>netstat -tulpen | grep -v 127.0.0.1</command> > </localfile> > be executed? > > Is it correlating with the configured frequency of syscheck? If yes, i'm > wondering about this because this definitions are placed outside of the > syscheck config section. >
I think it defaults to 60 seconds, but I'm not positive. http://ossec-docs.readthedocs.org/en/latest/syntax/head_ossec_config.localfile.html#element-frequency > kind regards, > matthias > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
