On Fri, 2008-05-16 at 14:42 -0300, Daniel Cid wrote: > Hi Sean, > > When OSSEC starts it sends all the integrity checking messages to the > server (basically all the > monitored file names and checksums), so it can use a lot of bandwidth. > So make sure it runs > the integrity checking slowly, take a look at: > > http://www.ossec.net/wiki/index.php/Know_How:Syscheck_Perf > > Specially changing the values of syscheck.sleep and sleep_after to > something like: > > syscheck.sleep=5 > syscheck.sleep_after=5 > > Should use much less CPU/bandwidth.
Am I correct in assuming that editing the internal_options.conf on the server, all the agents will recieve the updated settings?
