On Fri, Sep 27, 2019 at 12:32 PM Jerry Lowry <michaiah2...@gmail.com> wrote: > > Dan, > I changed the timeout variable to 8 hrs and restarted the database and ossec. > I got the same error about 6 hours of running. Mysql reported communication > error with the ossec user at 12 hours running. So, I don't think mysql is the > problem. What are your timeout variable (connect_timeout, wait_timeout, > interactive_timeout) set to in MariaDB? > I am going to rebuild this with Mariadb and see what happens. I'll let you > know, probably next week. >
They are whatever the defaults are. I think this page lists them: https://mariadb.com/kb/en/library/server-system-variables/ connect_timeout appears to be 10 wait_timeout 28800 interactive_timeout 28800 My system is a lot busier than yours though. > jerry > > On Thu, Sep 26, 2019 at 4:15 AM dan (ddp) <ddp...@gmail.com> wrote: >> >> On Wed, Sep 25, 2019 at 8:56 PM Jerry Lowry <michaiah2...@gmail.com> wrote: >> > >> > I understand completely, I am not real happy about it either, and I used >> > to work there in support! >> > >> > But that is what your docs say to use, so I did. >> > >> > I was going to install MariaDB and give that a shot as well. >> > >> > thanks, >> > >> > jerry >> > >> >> I just verified and it is mariadb 10.3.18 (on OpenBSD/amd64). >> I have a little over 47000 events in it, and had no drops. >> I'd really start looking at mysql timeouts, and possibly increasing them. >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to ossec-list+unsubscr...@googlegroups.com. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/ossec-list/CAMyQvMrAEp2s3f%3DrPYtCkPGVB9dBu0ZPUHUWaguTsPNSVBje2w%40mail.gmail.com. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/CAKP%3DcB6Yn8cqyTjPgKKv9NNZv%3DzfBH8iYazmbUBadCLB7HtGXA%40mail.gmail.com. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAMyQvMpkpyGXvs5PMQWfA%2BHBni6Mk1eN-Jw8P3u9ZQvhnBveZw%40mail.gmail.com.
