I use Hybrid modes for 1000s of agents and mixed managers. It allows me to distribute managers, and still have centralized collection. If I lose the WAN, the hybrids continue to process alerts, and once the WANs are restored the data resumes to the central host. They have proven to be extremely reliable and I have had no issues. I do run with as high as 20,000 agents in some cases with no issues.
Cheers Kat On Thursday, February 18, 2016 at 7:36:10 AM UTC-8, James Dough wrote: > > Looking at the hybrid install type; it installs two versions of ossec, > that have been reduced. One server role and one agent role. > > Is the hybrid as reliable? I don't see nearly as much documentation on it. > Is it a safer bet to go with dual install? > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
