Hello, We have our active responses set to time out af 86,400 seconds (24 hours). However, I notice that they are timing out after only 20 hours.
Can OSSEC only handle a fixed number of current active responses at one time so that it immediately expires current active responses in order to make room for new ones? Or is this a bug? Cheers! Trevor
