body

First seen , last seen .

body match_value scan_changing_file

The body match_value scan_changing_file, defined in monitor.cf. Defined once in 1 policy file, on 100 hosts in your infrastructure.