I currently have a setup with OSSEC and AIDE running on our servers.

We are currently receiving a daily alert for each agent when AIDE runs and changes audit.log.

I want to make an exception for that, but I still want to be alarmed when other programs change the audit.log file.

Is there any way to do that?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.