Hello,

I got a problem on one of my clients where ossec-logcollector got a very
long log to process, (200K single log). It was so big it filled up the file
system where the ossec.log is. Too big to be processed and send to the
OSSEC server.

I would like to know if there is a way to drop such event and prevent this
issue in the future.

Thanks,
-Stephane

Reply via email to