Search found 5 matches
- Fri Oct 10, 2014 7:39 pm
- Forum: General Help and Development Discussion
- Topic: Ossec Max agents
- Replies: 11
- Views: 17265
Re: Ossec Max agents
That will be an excellent improvement. Thanks for replying. One odd thing though... I re-created the RPMs using that spec file and I still receive the max agents error. Are you aware of anything else (besides max open files not being high enough) that would cause that error? I also verified I see th...
- Fri Oct 10, 2014 3:53 pm
- Forum: General Help and Development Discussion
- Topic: Ossec Max agents
- Replies: 11
- Views: 17265
Re: Ossec Max agents
I took a look at the spec file in the source RPM (just noticed you had it available). The spec file is setting the max agents to 16384 before it compiles...
# Increase max agents
echo "HEXTRA=-DMAX_AGENTS=16384" >> ./Config.OS
# Increase max agents
echo "HEXTRA=-DMAX_AGENTS=16384" >> ./Config.OS
- Thu Oct 09, 2014 6:24 pm
- Forum: General Help and Development Discussion
- Topic: Ossec Max agents
- Replies: 11
- Views: 17265
Re: Ossec Max agents
Thank you for your quick reply.
Just to make sure... You are saying the ossec-hids-server rpm located here: http://www5.atomicorp.com/channels/osse ... 6_64/RPMS/ is not the same OSSEC RPM being referred to above that is set to 8092 max agents? Instead it is set to 256?
Just to make sure... You are saying the ossec-hids-server rpm located here: http://www5.atomicorp.com/channels/osse ... 6_64/RPMS/ is not the same OSSEC RPM being referred to above that is set to 8092 max agents? Instead it is set to 256?
- Thu Oct 09, 2014 5:11 pm
- Forum: General Help and Development Discussion
- Topic: Ossec Max agents
- Replies: 11
- Views: 17265
Re: Ossec Max agents
I am only installing OSSEC via the ossec-hids-server-2.8.1-47.el6.art.x86_64 RPM. Is there a different OSSEC server RPM you get when you install ASL?
- Thu Oct 09, 2014 12:56 am
- Forum: General Help and Development Discussion
- Topic: Ossec Max agents
- Replies: 11
- Views: 17265
Re: Ossec Max agents
Can anyone confirm that it is 8092? I am using ossec-hids-server-2.8.1-47.el6.art.x86_64 on RHEL 6.3. The max open files is set to 10,000. However, remoted is still showing that the max agents is 256. 2014/10/08 21:02:25 ossec-remoted: INFO: Started (pid: 28839). 2014/10/08 21:02:25 ossec-remoted(41...