Dan, I changed the timeout variable to 8 hrs and restarted the database and ossec. I got the same error about 6 hours of running. Mysql reported communication error with the ossec user at 12 hours running. So, I don't think mysql is the problem. What are your timeout variable (connect_timeout, wait_timeout, interactive_timeout) set to in MariaDB? I am going to rebuild this with Mariadb and see what happens. I'll let you know, probably next week.
jerry On Thu, Sep 26, 2019 at 4:15 AM dan (ddp) <ddp...@gmail.com> wrote: > On Wed, Sep 25, 2019 at 8:56 PM Jerry Lowry <michaiah2...@gmail.com> > wrote: > > > > I understand completely, I am not real happy about it either, and I > used to work there in support! > > > > But that is what your docs say to use, so I did. > > > > I was going to install MariaDB and give that a shot as well. > > > > thanks, > > > > jerry > > > > I just verified and it is mariadb 10.3.18 (on OpenBSD/amd64). > I have a little over 47000 events in it, and had no drops. > I'd really start looking at mysql timeouts, and possibly increasing them. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/CAMyQvMrAEp2s3f%3DrPYtCkPGVB9dBu0ZPUHUWaguTsPNSVBje2w%40mail.gmail.com > . > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAKP%3DcB6Yn8cqyTjPgKKv9NNZv%3DzfBH8iYazmbUBadCLB7HtGXA%40mail.gmail.com.