Re: [ossec-list] remoted Dropping Events

2016-12-08 Thread dan (ddp)
On Dec 8, 2016 4:41 PM, "Chris Decker" wrote: All, I have an OSSEC instance (running the latest/greatest Wuzuh code cloned from GitHub) that has about 1k active hosts. I've noticed recently that hosts are flipping back and forth between *Active* and *Disconnected*.

[ossec-list] remoted Dropping Events

2016-12-08 Thread Chris Decker
All, I have an OSSEC instance (running the latest/greatest Wuzuh code cloned from GitHub) that has about 1k active hosts. I've noticed recently that hosts are flipping back and forth between *Active* and *Disconnected*. I've also noticed that not all of the log messages from "*Active" *hosts