On Tue, Jun 14, 2016 at 12:47 PM, Jeff Blaine <[email protected]> wrote: > I'll also add that /var/ossec/queue/syscheck contains these 2 files, the > larger of the 2 was last modified ~4 days ago. I don't know if that's useful > info or not: > > -rw-r----- 1 ossec ossec 3 May 21 10:29 .syscheck.cpt > -rw-r----- 1 ossec ossec 494689 Jun 9 10:48 syscheck >
Are the files you modified present in the syscheck file? Are the hashes up to date? > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
