Hello,
Is there a way to limit reports to specific servers? In other words, I don't want to report on failed logins for every server, just 3 or 4 in a daily summarized email.
I don't really see a way to do it via <reports></reports> in ossec.conf or ossec-remoted.
Thanks,
j