Hello Javier! I have another problem. If i want to exclude a group of extensions, how would i do it? because if i use *<directories restrict="!.msg$|!.sql$|!.rar$">/var/zimbra/</directories> *
This is not working. I guess is because im using and OR comparator or for the way im using the expresion. Any idea? Thanks again! Diego. El mié., 18 sept. 2019 a las 11:35, Javier Castro (<javier.cas...@wazuh.com>) escribió: > Then you can try with restrict: > > *<directories restrict="!.msg$">/var/zimbra/</directories>* > > The folder you are monitoring will ignore files ending in .msg. You don't > need ignore for that. > Regards, > Javier. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/49ddbb17-0c49-44f4-8793-47b7dc210423%40googlegroups.com > <https://groups.google.com/d/msgid/ossec-list/49ddbb17-0c49-44f4-8793-47b7dc210423%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAGQH4F%2B3HhsSN9ZtFGRgjtDBd1pHqxQwP%3D7SEgovzKk5hiEP1Q%40mail.gmail.com.
