We are looking at performance testing/tuning OSSEC. As many of you are aware there is a configuration option in OSSEC's internal_options.conf file for changing the following:
syscheck.sleep=2 syscheck.sleep_after=15 I am wondering if anyone has modified these parameters and to what effect long-term? Is it safe to set these to syscheck.sleep to zero and syscheck.sleep to 128 long term? Also, within the ossec.conf file itself there is a syscheck paramater for "frequency", we have changed this to half an hour (1800 seconds), is it safe to change this to 10 minutes (600 seconds) in the long term? Cheers -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
