Yes periodically we have some burst, especially when executing "yum update" on all server. We get mail alert, but their delayed so we have problem to detect file modification.
ok this is what I thought for the patch. Le jeudi 28 janvier 2016 11:02:28 UTC+1, Eero Volotinen a écrit : > > So, you are sending over 9999 in one hour? > > Changing that requires patch and recompiling ossec server. > > -- > Eero > > 2016-01-28 11:10 GMT+02:00 Lionel Caignec <[email protected] <javascript:>> > : > >> Hi, >> >> I use ossec to monitor all servers activities from my enterprise >> including creation/modification of file. >> >> I forward to each sysadmin (configured in ossec.conf) all alert from >> their server. >> >> Today i face a problem, i have many server wich generate mail alert, and >> the global mail restriction (max 9999) is not enough. >> Is it possible to disable this limit, or is it hardcoded >> >> Thanks for help. >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> For more options, visit https://groups.google.com/d/optout. >> > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
