Hi I'm running CentOS 7.5.1804. I'm running OSSEC ossec-hids-server-3.3.0-7006.el7.art.x86_64. This is running on a t2.small instance with 2 GB RAM. I'm seeing an issue that appears to be similar to https://github.com/ossec/ossec-hids/issues/1727
This box has been sitting pretty dormant for awhile now. I tried implementing some custom rules but that's when the memory leak started. I backed out all my custom rules and the ossec-analysisd process is still consuming all the memory and eventually OOMs the box (this never happened before I started implementing some rules, so I thought backing out my changes would stop the leak). Temporarily, I've cron'd a job to restart OSSEC every night, but even after about 12 hours, memory usage on the process has jumped to 11.9%. list_agents shows that there are only 76 agents active. What other information would be useful to help diagnose the issue? Thanks. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/cbbe9f4c-430c-473d-8bc2-0439c2287c97%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
