It looks like you're new here. If you want to get involved, click one of these buttons!
Hello, with an ossec agent installed to receive with the syscheck option, changes in a file? And not just the old cheksum and the new one? With the parameter "report_change="yes"
As I understand it, With the parameter, as below normally it should give me what was added when I modify a file in / var / log / test1 /?
But it only alerts me of the checksum changed each time without telling me what has changed inside the files..