Jeremy, OSSEC doesn't care about the size of the logfile. It monitors the files in real-time and only looks at the events that occur at the moment they occur.
Kind Regards, Wim On Fri, Dec 11, 2009 at 12:53 AM, jplee3 <[email protected]> wrote: > Hey guys, > > I'm sure a few of you have stumbled across an issue like this, but > what have your findings been with having OSSEC analyze and monitor log > files that grow to be in the hundreds of megs? I'm talking like > 500mb-1gb... > > Any issues with performance either on the network, cpu, or hard disk > side? > > > TIA! > Jeremy > -- Wim Remes Security Afficionado
