Hello All,
I have 2 Linux machines have already installed ossec agent.I succesfully
disable this rule like this
(ossec_rules.xml)
<--!rule id="554" level="0">
<category>ossec</category>
<decoded_as>syscheck_new_entry</decoded_as>
<description>File added to the system.</description>
<group>syscheck,</group>
</rule--!>
but the other one still send mail whenever a new file add to folder.How
could i disable this rule recommended way?
Regards
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
