Is it possible to send alert when a process uses more cpu like 80% or above.
or Can I monitor a particular process and report if its cpu usage increases
more than 80%
How can I do it?
I tried it like
<localfile>
<log_format>command</log_format>
<command>df -h</command>
</localfile>
<rule id=”100101″ level=”7″>
<if_sid>530</if_sid>
<match>ossec: output: ‘top</match>
<regex>100</regex>
<description>Process reached 100% CPU usage</description>
</rule>
it doesn't work
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
