# auth_log_check — authoritative logging / audit policy probe (every 2 minutes)
*/2 * * * * root /var/ossec/modules/auditd/authoritative_logging_check.sh
