Well, Check memory_limit on php also.
Ossec wui is no longer supported. You should use kibana+elastic search instead of it. Eero Eero Thanks for the quick response. I chown'ed alerts.log from ossec.ossec to ossec.apache and still got the error. I then chmod'ed alerts.log from 640 to 666 and still got the error. Alerts.log is still growing, though. Up to 4.2G. On Saturday, August 8, 2015 at 3:29:32 PM UTC-4, Eero Volotinen wrote: > > Well, you need to give correct permissions to apache as wui is running > under apache uid.. > > Eeeo > 8.8.2015 8.27 ip. "Daniel Twardowski" <noghri...@gmail.com> kirjoitti: > >> >> I'm using OSSEC Server Virtual Appliance 2.8.2 and last night I >> configured a few domain controllers to send it their logs. When I came in >> today, the WUI is displaying an error of: >> "Warning: fopen(/var/ossec/logs/alerts/alerts.log): failed to open >> stream: Value too large for defined data type in >> /opt/lampp/htdocs/ossec-wui/lib/os_lib_alerts.php on line 839" >> >> My alerts.log file is 3.5G. If I delete it and restart ossec services, >> the file is recreated at 3.5G. Is this an issue with file size? If so, can >> I up the log rotation to more than just once a day? And how would I flush >> whatever buffer keeps recreating the 3.5G alerts.log file so I can get back >> to reviewing logs? >> >> Similar, but unanswered message from 2013: >> https://groups.google.com/forum/#!msg/ossec-list/topCxSvvmBk/5t4YEfPTTYUJ >> >> Thanks. >> >> Dan >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to ossec-list+...@googlegroups.com. >> For more options, visit https://groups.google.com/d/optout. >> > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
