Hey guys, while adding more and more ossec agents to our ossec server installation we are running into the issue, that the ossec-analysisd have an cpu consumation of about 85% and the ossec-remoted of about 30% of a single cpu thread.
We are running the ossec server, together with other software, on a server with 64cpu cores, so it seems a bit of waste, that every ossec component only can use 1 of these. We are processing about 6000 event/s and are running into the issue, that ossec linux agents periodically disconnect from master, and we think this is due to the cpu cap on the analysisd and remoted processes (i´ve read a similar thread http://marc.info/?l=ossec-list&m=128032486312169&w=2) Any ideas on that? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
