[ossec-list] OSSEC agent limit modification after server install

[Nikki Sridhar]

Is there a command that can be run to change the max agents per manager? 

The OSSEC server has already been installed so I cannot find a way to run 
the following:

*Can an OSSEC manager have more than 256 agents?*
*By default OSSEC limits the number of agents to 256 per manager. This 
limitation is set in the code, but*
*can be modified at compile time. Depending on the event load, a manager 
running on modern hardware*
*can handle many more agents. Some users have more than 1000 agents on a 
single manager. To change*
*the maximum number of agents, cd into the src directory and run the 
following command:*
*make setmaxagents*

Any help with this much appreciated! 


-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ossec-list] ossec-remoted high CPU utlization

[Nikki Sridhar]

There shouldn't be! Only system integrity configuration is enabled and that 
runs every 20 hours . Real time system integrity check is enabled for 3 
directories. 

I was wondering if clearing out the syscheck DB would help? 

Thank you!

> On Apr 26, 2017, at 3:02 PM, dan (ddp)  wrote:
> 
>> On Wed, Apr 26, 2017 at 9:59 AM, Nikki S  wrote:
>> We have about 480 agents reporting the OSSEC server. The remoted server is
>> running constantly at 100% CPU utilization. Any suggestions on how to
>> re-mediate this please?
>> 
> 
> Is there a lot of traffic between the agents and the server?
> 
>> --
>> 
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "ossec-list" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to ossec-list+unsubscr...@googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
> 
> -- 
> 
> --- 
> You received this message because you are subscribed to a topic in the Google 
> Groups "ossec-list" group.
> To unsubscribe from this topic, visit 
> https://groups.google.com/d/topic/ossec-list/6iUIQtsWLXY/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to 
> ossec-list+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.