I'm using OSSEC HIDS

from this i'm getting the alerts based on all events. but, i need to know a 
*user 
whom modified the specific file*.
is this possible? 

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to