Re: [ossec-list] Ossec Windows Agent High Disk I/O Consumption

[dan (ddp)]

On Thu, May 25, 2017 at 11:37 AM, LGuerra  wrote:
> Hi,
>
>
>
> I've been noticing heavy disk I/O operations on some of my OSSEC agents. The
> average write is around 2 mb/s and 0 mb/s for read operations (which is
> weird).
>
>
>
> Is anyone experiencing the same thing? Wasn’t supposed to be (at least more)
> reading instead of writing operations? And why is there so high
> consumption!?
>
>
>
> I'm using OSSEC 2.8.3 on server 2012 R2.
>
>
>
> Syscheck frequency is set to 72000 and the settings I’m using (for log and
> event viewer monitoring) are set for both happening and not happening
> servers.
>
>
>
> Can someone help me?
>
>

Is it writing to ossec.log?

>
> Regards,
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-list+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[ossec-list] Ossec Windows Agent High Disk I/O Consumption

[LGuerra]

Hi,

 

I've been noticing heavy disk I/O operations on some of my OSSEC agents. 
The average write is around 2 mb/s and 0 mb/s for read operations (which is 
weird).

 

Is anyone experiencing the same thing? Wasn’t supposed to be (at least 
more) reading instead of writing operations? And why is there so high 
consumption!? 

 

I'm using OSSEC 2.8.3 on server 2012 R2.

 

Syscheck frequency is set to 72000 and the settings I’m using (for log and 
event viewer monitoring) are set for both happening and not happening 
servers.

 

Can someone help me?

 

Regards,

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[ossec-list] Ossec Windows Agent High Disk I/O Consumption

[LGuerra]

Hi,

 

I've been noticing heavy disk I/O operations on some of my OSSEC agents. 
The average write is around 2 mb/s and 0 mb/s for read operations (which is 
weird).

 

Is anyone experiencing the same thing? Wasn’t supposed to be (at least 
more) reading instead of writing operations? And why is there so high 
consumption!? 

 

I'm using OSSEC 2.8.3 on server 2012 R2.

 

Syscheck frequency is set to 72000 and the settings I’m using (for log and 
event viewer monitoring) are set for both happening and not happening 
servers.

 

Can someone help me?

 

Regards,

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.