Tripwire logs

[Toby Schaefer]

-|-----Original Message-----
-|From: redhat-list-bounces at redhat.com [mailto:redhat-list-
-|bounces at redhat.com] On Behalf Of Adam Gilstrap
-|Sent: Wednesday, March 31, 2004 6:47 AM
-|To: redhat-list at redhat.com
-|Subject: Tripwire logs
-|
-|
-|My tripwire logs, which are emailed to me, continuously grow in size(about
-|5mb now).  I have noticed that it keeps the same data over and over...it
-|will add any new system changes but what I want is to just have the days
-|logs of what happened.  Let me know if this isn't clear and I can explain
-|more.  Thanks
-|
-|Adam
-|
-|
-|--
-|redhat-list mailing list
-|unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
-|https://www.redhat.com/mailman/listinfo/redhat-list

Sounds like it's time for a database update. This will update your tripwire
and give the OK to all changed files.  PLEASE NOTE:  Any files (good or bad)
will be OK'd, so be sure of what you're giving the thumbs up to!

Tripwire -m u -r /var/lib/tripwire/reports/<MachineName-LatestDate>

With the <...> stuff filled in with the latest file from that directory.
Some people find it easier when they know the system is clear to do 

Rm -rf /var/lib/tripwire/reports/*
(this clears the report directory)

Tripwire --check
(This will manually run tripwire, creating a new report)

Tripwire -m u -r /var/lib/tripwire/reports/<tab>

You will need your tripwire passwords to update the file. 

Hope this helps,

Toby