Verlag Neue Stadt wrote: > Hello, > > I heard that the hardware requirement for OSSEC are moderate :-) > > > What are the recommendations (RAM und hd/disk)? > (I am aware that this depends of many factors....)
Hello John, As you noted, it all depends. I know that OSSEC can run on very old hardware, such as a PII. Of course I wouldn't expect it to do any heavy lifting. The database component might not run well on something like that due simply to what the database, itself, requires. I have it running in two places: at work and at home. At work, it is on a server class machine that is about 2 years old. It's a pretty decent piece of hardware. It's currently analyzing several hundred log files in real time, which amounts to 2 million events per day on some days. It is barely breaking a sweat. I have no doubt that this could be at least quadrupled before I saw any kind of system impact. HTH, Mike
