to be more clear. i am trying to avoid "new file added alert" on newly added host
On Monday, April 22, 2019 at 12:59:41 PM UTC-4, ac427 wrote: > > All our vms are from a image, to avoid too many alerts in slack/ logs, can > i manually populate "var/ossec/queue/syscheck/\$(hostname -f)\)\ > any-\>syscheck manually " file while adding agent? > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
