On Thu, May 25, 2017 at 11:37 AM, LGuerra <aza...@gmail.com> wrote: > Hi, > > > > I've been noticing heavy disk I/O operations on some of my OSSEC agents. The > average write is around 2 mb/s and 0 mb/s for read operations (which is > weird). > > > > Is anyone experiencing the same thing? Wasn’t supposed to be (at least more) > reading instead of writing operations? And why is there so high > consumption!? > > > > I'm using OSSEC 2.8.3 on server 2012 R2. > > > > Syscheck frequency is set to 72000 and the settings I’m using (for log and > event viewer monitoring) are set for both happening and not happening > servers. > > > > Can someone help me? > >
Is it writing to ossec.log? > > Regards, > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.