OSSEC.conf vs Agent.conf -- System Integrity check

[Nikki S]

I read through some of the posts already on the list regarding this topic but I would still like some clarification on this please. 

I have added all the system integrity options of 'include' and 'ignore'  in OSSEC.conf. Do I need to replicate this to agent.conf as well?  

Thank you! 

[dan (ddp)]

On Jan 16, 2017 3:25 PM, "Nikki S" <nikkisr...@gmail.com> wrote:

I read through some of the posts already on the list regarding this topic but I would still like some clarification on this please. 

I have added all the system integrity options of 'include' and 'ignore'  in OSSEC.conf. Do I need to replicate this to agent.conf as well?  

Nope. The options in both files should be combined into one configuration. Duplicating directories in sycheck is also a bad idea and can cause issues.

Thank you! 

--

---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.