[ossec-list] Re: syscheck can take months to report new or changed files

months, suggesting that the number of updates with each run continues to decline. Any suggestions for identifying this bottleneck would be appreciated. Thank you. On Monday, October 17, 2016 at 11:46:41 AM UTC-7, Sunny Day wrote: > > Is there a hard limit on the rate at which sy

Re: [ossec-list] syscheck can take months to report new or changed files

On Mon, Oct 17, 2016 at 2:46 PM, Sunny Day <t425...@gmail.com > > wrote: > > > > > I have roughly 120 clients reporting to one server. I see frequent > > occasions where new or changed files (sometimes with realtime enabled, > > sometimes not) seem to

[ossec-list] syscheck can take months to report new or changed files

Is there a hard limit on the rate at which syscheck will report new/changed files? I have roughly 120 clients reporting to one server. I see frequent occasions where new or changed files (sometimes with realtime enabled, sometimes not) seem to be reported by syscheck days, weeks, or even