How many agents? How many events per second? What kind of alerts are you seeing most of?
On Mon, Mar 14, 2011 at 5:17 PM, Doug Burks <[email protected]> wrote: > Agreed. Any ideas on how to find out why analysisd is at 99% cpu? :) > > Thanks, > Doug Burks > > On Mon, Mar 14, 2011 at 3:04 PM, dan (ddp) <[email protected]> wrote: >> I'd start by trying to find out why analysisd is at 99% cpu. >> >> On Fri, Mar 11, 2011 at 2:08 PM, Doug Burks <[email protected]> wrote: >>> Was there ever any conclusion on this problem? I have an OSSEC 2.5.1 server >>> with 43 agents. ossec-analysisd is using 99% CPU! Unix agents periodically >>> disconnect and will eventually reconnect. What can I do to troubleshoot >>> this further? >>> Thanks, >>> Doug Burks >> >
