It may be worth investigating an upgrade to OSSEC 2.9.0. According to the changelog, there's 2 potentially useful fixes that may help you out https://github.com/ossec/ossec-hids/releases
- Avoids computing hashes multiple times to improve performance - Syscheck improvements Alternatively, try bumping up the amount of allocated CPUs. Maybe you've finally topped out the server node? Do you have historical graphs of CPU usage during scan times? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
