Fwd: Unable to add directory to real time monitoring

18 views
Skip to first unread message

MySystem 365

unread,
Sep 22, 2017, 4:51:49 AM9/22/17
to osse...@googlegroups.com
Dear all,

I would like to understand I am currently monitoring some critical file paths in the server.
The file paths will change due to code deployment or war files upload in Tomcat folder.
Due to that, there will be many files sha1sum and checksum changes.
However OSSEC seems not able to report changes for ALL the changes in the file path.
In the /var/ossec/logs/ossec.log, it will log as
2017/09/22 02:27:29 ossec-syscheckd: ERROR: Unable to add directory to real time monitoring: ............. -l 28

Not too sure is it due to too many files changes so OSSEC is not able to handle ?

Anyone has the same experiences as I am ?

Really appreciate if someone could provide advice on this please.

Thanks!

Regards,
Shan. 

Reply all
Reply to author
Forward
0 new messages