Re: [ossec-list] Trouble with configuring OSSEC/UFW for Port Scan detection

2017-05-08 Thread Jason Aleksi
Dan, Thanks for the followup. I made the changes you suggested and it's detecting the rules as expected. Now, last step is to actually get it to issue the active-response with a firewall drop. Thank you! -JA- On Wednesday, May 3, 2017 at 4:40:18 PM UTC-5, dan (ddpbsd) wrote: > > On Wed

[ossec-list] Re: Compress elasticsearc indexes

2017-05-08 Thread Alessandro Di Giuseppe
I think compression of elasticsearch indices is enabled by default within ES, but to save further disk space, I've used a file system that supports transparent compression, like btrfs or zfs. zfs has higher memory requirements than btrfs, and both will slow down your disk performance performan