There is /var/ossec/logs/alerts/alerts.log, but I suppose you'd have to do the math by yourself. i.e.: "cat /var/ossec/logs/alerts/alerts.log | grep "2009 Apr 20 19:.* $youragent" | wc -l" would get you the number of alerts by $youragent between 19:00:00 and 19:59:59, $numalerts. 3600 s / $numalerts = alerts per s for $youragent.
regards m On Apr 20, 2:08 pm, Roch <[email protected]> wrote: > Anyone have any ideas how to do this or where I can look if there is a > log file? > > Regards, > > Paul > > On Apr 16, 4:27 pm, Roch <[email protected]> wrote: > > > Is there a way to capture how many events per second are being > > generated per agent? > > > Paul
