Thanks Dan.. its really help. On Monday, December 4, 2017 at 4:25:27 AM UTC+7, dan (ddpbsd) wrote: > > On Tue, Nov 14, 2017 at 8:53 AM, amar haq <[email protected] <javascript:>> > wrote: > > Dear All > > > > Could OSSEC perform syscheck for File Integration Monitoring on specific > > agent. let's say I have 5 servers.Server A,B,C,D,E. > > on server A , I just want to monitor /var/www/html/Demo/demo.db. > > In server A's ossec.conf, include a <directories> entry for this. > > > on server B, i want to monitor only /ngingx/index.html. > > On server B, include a <directories> entry for this. > > > on Server C, i want to monitor /var/www/html/XYZ.xx, etc > > On server C include a <directories> entry for this. > > Alternatively, you can include these in the agent.conf. There is a way > to limit it to specific agents, but I can't remember the specifics off > hand. > > > > > > > could you help me? because I read that Active rsponse have <agent_id> > tag to > > define specific agent. > > > > I'm not sure what active response has to do with the syscheck questions. > > > thankyou. > > Amar. > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/d/optout. >
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
