Set system audit files array to empty by default

wazuh · Mar 18, 2020 · f8614d0 · f8614d0
1 parent 057f54e
commit f8614d0
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/manifests/params_agent.pp b/manifests/params_agent.pp
@@ -116,10 +116,9 @@
       $ossec_rootcheck_rootkit_files = '/var/ossec/etc/shared/rootkit_files.txt'
       $ossec_rootcheck_rootkit_trojans = '/var/ossec/etc/shared/rootkit_trojans.txt'
       $ossec_rootcheck_skip_nfs = 'yes'
-      $ossec_rootcheck_system_audit = [
-        "/var/ossec/etc/shared/system_audit_rcl.txt",
-        "/var/ossec/etc/shared/system_audit_ssh.txt",
-      ]
+
+      # Example: ["/var/ossec/etc/shared/system_audit_rcl.txt"]
+      $ossec_rootcheck_system_audit = [] 
 
       # SCA