Hello,
I have multiple VPS running on a node with ASL. the ossec.conf tells <frequency>86400</frequency> scantime when ossec-syscheck will scan.
But it will hit all the VPS on the same time....., the disks are running bad because on all syscheck hitting the same time.
Now i can edit the ossec. conf on every machine and tell them the time <scan_time>00:05</scan_time>, but when asl -s -f will be run it's all gone!
And the default setting is again <frequency>86400</frequency>!!!
if i look in /var/asl/data/templates/template-ossec-server.conf i can't find anyting about frequency>86400</frequency>.
How the make <scan_time> permanent for the machines? to avoid hitting the disks at the same time?
Thnx in advanced
ossec.conf scan time
Re: ossec.conf scan time
Nobody??
Re: ossec.conf scan time
You may set this in ASL Web in the options tab of the File Integrity window.
Files in /var/asl/data should not be manipulated.
Files in /var/asl/data should not be manipulated.