http://groups.google.com/group/ossec-list/browse_thread/thread/224408b3f6b034a8/a9c81a7f95a1c2f0?lnk=gst&q=Eps#a9c81a7f95a1c2f0
Check out the past discussion on ossec-list, but in the end you will need to do your own starting. With ossec 20 agents is very little overhead. As others said have said it's all about the amounts of logs. On Nov 18, 2010, at 2:57 AM, Ankush Grover <ankushos...@gmail.com> wrote: > Hi All, > > I am trying to setup Ossec for my organization in the Server/Client > architecture. The server will run on Centos 5.x and around 20 agents will run > on Linux servers. I would like to know the Memory and CPU Requirements for > Server and for agent on each host. > > Ossec 2.5.1 will be used for both server and agent > > > Regards > > Ankush