Hi Jesus, We are getting all other messages being alerted via 1002. All WARN/ERROR/INFO messages from the agent being alerted at level 2 - like the syscheck files/directory not found.
About 900 alerts were triggered in small time frame and 30 duplicates. Not sure if we messed the decoding and rules set. Thanks Kumar -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
