On Mon, Apr 22, 2013 at 11:26 AM, Michiel van Es wrote:
> Hello,
>
> We have found out that we had an Apache webserver showing its has reached
> the MaxClients settings.
> We could not find the message back in our Splunk interface so I copy/paste
> the message into /var/ossec/bin/ossec-logtest and
Hello,
We have found out that we had an Apache webserver showing its has reached
the MaxClients settings.
We could not find the message back in our Splunk interface so I copy/paste
the message into /var/ossec/bin/ossec-logtest and found out that it is
being silenced by the apache_rules.xml rule