diff --git a/attributes/backup.rb b/attributes/backup.rb
new file mode 100644
index 0000000..6373e8a
--- /dev/null
+++ b/attributes/backup.rb
@@ -0,0 +1,2 @@
+# Logs to backup
+node.default[:mon_log_backup][:logs][:mon_notification] = [ '/var/log/mon-notification/notification.log' ]
diff --git a/attributes/monitor.rb b/attributes/monitor.rb
new file mode 100644
index 0000000..558eddf
--- /dev/null
+++ b/attributes/monitor.rb
@@ -0,0 +1,4 @@
+# Have ossec watch the log
+node.default[:ossec][:watched][:mon_notification] = {
+  '/var/log/mon-notification/notification.log' => :syslog
+}
diff --git a/metadata.rb b/metadata.rb
index 9cf6acb..7a59c43 100644
--- a/metadata.rb
+++ b/metadata.rb
@@ -4,4 +4,4 @@ maintainer_email 'hpcs-mon@hp.com'
 license          'All rights reserved'
 description      'Installs/Configures mon_notification'
 long_description IO.read(File.join(File.dirname(__FILE__), 'README.md'))
-version          '0.1.3'
+version          '0.1.4'