I noticed this. There appears to be a memory leak with event log monitoring. I commented that portion out of the config and haven't had any memory problems.
To get the event logs off, I installed SNARE and had it forward them to OSSEC. (or rather, to a syslog-ng separated file that the OSSEC server monitors.) On Sep 8, 12:51 pm, Michael Ward <[EMAIL PROTECTED]> wrote: > Has anybody noticed an increase in the RAM used for the Windows 1.6 > client. I'm seeing 512M to 1G of RAM utilization on windows 2003. > > mjw
