1

I have added this rule to receive real-time alerts but I would like to modify it or add another rule so that I can exclude the sub-folder var/www/html/wp-content/cache

<directories report_changes="yes" realtime="yes" restrict=".php|.js|.py|.sh|.html" check_all="yes">/var/www</directories>

can this be done?

JoaMika
  • 479
  • 2
  • 9
  • 20

1 Answers1

1

add an ignore directive to your ossec-server.conf file.

<ignore>sub-dir</ignore>
troseman
  • 311
  • 1
  • 7