Thank you for your reply! I appreciate the help. Using exactly what you posted while inside the ossec-hids-A.B.C directory: "sudo env SETMAXAGENTS=9999 USE_ZEROMQ=y ./install", it installs but the output still reports the default. Could this be incorrect? Is there another way to verify the max agents?
I don't understand why there is no make in your instruction, but it seems that the installer is doing its own make and probably overriding the one I manually build right before using it (the installer). Here is some output from the beginning go the install script: cd external/lua/ && make posix make[1]: Entering directory '/home/username/ossec-hids-2.9.3/src/external/lua-5.2.3' cd src && make posix make[2]: Entering directory '/home/username/ossec-hids-2.9.3/src/external/lua-5.2.3/src' make all SYSCFLAGS="-DLUA_USE_POSIX" make[3]: Entering directory '/home/username/ossec-hids-2.9.3/src/external/lua-5.2.3/src' make[3]: Nothing to be done for 'all'. make[3]: Leaving directory '/home/username/ossec-hids-2.9.3/src/external/lua-5.2.3/src' make[2]: Leaving directory '/home/username/ossec-hids-2.9.3/src/external/lua-5.2.3/src' make[1]: Leaving directory '/home/username/ossec-hids-2.9.3/src/external/lua-5.2.3' make settings make[1]: Entering directory '/home/username/ossec-hids-2.9.3/src' General settings: TARGET: server V: DEBUG: DEBUGAD PREFIX: /var/ossec MAXAGENTS: 2048 DATABASE: ONEWAY: no CLEANFULL: no ... On Thursday, February 15, 2018 at 4:03:01 AM UTC-8, dan (ddpbsd) wrote: > > On Wed, Feb 14, 2018 at 3:09 PM, <temp.em...@gmail.com <javascript:>> > wrote: > > The latest: 2.9.3. Is this too new? I've noticed discrepancies between > tis > > version and some of the docs. Is there a specific version number that is > > 'easiest to use'? > > > > Also, there are additional instructions at > > > http://ossec-docs.readthedocs.io/en/latest/manual/installation/installation-binary.html > > > More current (although still out of date) documentation is at > https://ossec.github.io. > Read the docs has been problematic, and I haven't really tried to > figure out why it fails. > > > and in the INSTALL file in the root directory it has addition > instructions > > (presumable last updated for 2.9.2) for a binary installation under 'By > Hand > > Installation', but I have not done any of those things. Just make > > TARGET=server SETMAXAGENTS=n. > > > > So if I understand correctly, you did `make TARGET=server > SETMAXAGENTS=9999` then > when that was done you ran `install.sh`? > I don't think that'll work the way you want it to. When I want to set > some of the options during `install.sh` > I usually use something like: > # env SETMAXAGENTS=9999 USE_ZEROMQ=y ./install.sh > > This passes the environment variables to the script for me, to make > sure the right options are being used. > > > > > On Wednesday, February 14, 2018 at 11:26:50 AM UTC-8, > temp.em...@gmail.com > > wrote: > >> > >> I noticed that I am able to successfully compile the source (with the > >> target specified), and it reports that the new SETMAXAGENTS value is > >> correct. However, when I run the installer, it reports the default > number > >> for SETMAXAGENTS (2048). As far I understand, I should just be able to > >> recompile and either use a fresh install, or run the installer again to > >> update. Is that correct? > >> https://ossec-docs.readthedocs.io/en/latest/faq/ossec.html > >> > >> Additional question, does the MAXAGENTS need to be set on both the > Server > >> AND the Agent installations? > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to ossec-list+...@googlegroups.com <javascript:>. > > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.