the ignored directories are getting scanned? Maybe
>> have
>> > a duplicated directory given to the Syscheck both in ossec.conf and
>> > agent.conf?
>> >
>>
>> Unless something has changed, that's been the way it's worked for years
>> now.
>>
>
I have a large number of applications that i need to monitor and i was
wondering if there is a syscheck configuration option that i can use that
will not scan certain directories and/or files(similar to the way the
skip_nfs aborts syschecks). I have my agent_conf set to ignore the
directories
