BEGIN:VCALENDAR
PRODID:-//Google Inc//Google Calendar 70.9054//EN
VERSION:2.0
CALSCALE:GREGORIAN
METHOD:REQUEST
BEGIN:VEVENT
DTSTART:20150717T133000Z
DTEND:20150717T143000Z
DTSTAMP:20150717T132223Z
ORGANIZER;CN=Ronny Vaningh:mailto:ronny@guard-it.be
UID:d99a6280-2c86-11e5-a954-8122ffb5b571
ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=
 TRUE;CN=ossec-list;X-NUM-GUESTS=0:mailto:ossec-list@googlegroups.com
ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=
 TRUE;CN=Lucio Guerra;X-NUM-GUESTS=0:mailto:azazec@gmail.com
CLASS:PRIVATE
CREATED:20150717T132222Z
DESCRIPTION:I m sorry on the originalXl Illll meant:x.l\nL.lled.llll\nLxil\
 nu_ex150d707.log ->\nXll u_ex% elY&m%d.log -> works fine for each file crea
 tilon (daily)\n\nbut with:\n\n\nu_ex15070723.log -> u_ex%Y&m%d%H.log -> It 
 reads the file but I have to restart ossec otherwise it won t read it autom
 atically (Hourly).\n\nVix#lx\nThankslt\n\nXetii.lgx \n\nEe \n\n\nLl\n\nX.xs
 xil\nLltil\nLuulllXll\nXe\n\n\n\nXewl\n\nsexta-feira\, 17 de Julho de 2015 
 às 13:22:18 UTC+1\, LGuerra escreveu:\nHi\nIe\n\n\nI found a few topics reg
 arding IIS log rotation however\, no one seems to have an easy answer for t
 his. \n\n\nI have huge amount of IIS logs that can t be managed daily and s
 o I have to set them to rotate hourly. Is there a way of getting OSSEC to r
 efresh and read these files this way without having to restart agent?\n\n\n
 Example\, I have these:\n\n\nu_ex15070723.log\nIf I set them  to  "u_ex%Y%m
 %d.log" they will be read by ossec daily without a problem however if I hav
 e:\n\n\nu_ex15070723.log\nAnd I had to set as "u_ex%Y%m%d%H.log" This way\,
  Ossec won t read files hourly. I have to restart it manually or by batch w
 hich\, I think\, it s not the correct/best way (It will pollut the logs).\n
 \n\nDoes anyone knows a way of achieving this without restarting?\n\n\nThan
 ks! \n\n-- \n\n--- \nYou received this message because you are subscribed t
 o the Google Groups "ossec-list" group.\nTo unsubscribe from this group and
  stop receiving emails from it\, send an email to ossec-list+unsubscribe@go
 oglegroups.com.\nFor more options\, visit https://groups.google.com/d/optou
 t.\nView your event at https://www.google.com/calendar/event?action=VIEW&ei
 d=X2Nnc2ppbzltNjhzMzBiOWljY3MzY2I5aDY1aWphYmIxNzRxajhiOW82NHAzNHBqNmM4cW00Z
 DluNjQgb3NzZWMtbGlzdEBnb29nbGVncm91cHMuY29t&tok=MTcjcm9ubnlAZ3VhcmQtaXQuYmV
 kOGRiZjAxMTM2MGU1ZTUwZTdiNTljNjhmYjM1MzZhMTc0NGNjMjNl&ctz=Europe/Brussels&h
 l=en.
LAST-MODIFIED:20150717T132223Z
LOCATION:Ii
SEQUENCE:0
STATUS:CONFIRMED
SUMMARY:[ossec-list] Re: IIS hourly log rotation issue
TRANSP:TRANSPARENT
END:VEVENT
END:VCALENDAR