Like I said, it's only a guess. I would first test it by increasing the limits just temporarily: e.g.
sysctl fs.inotify.max_user_watches=524288 If that works then you can make the change permanent by updating /etc/sysctl.conf -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.