Re: [ossec-list] Apache MaxClients reached error message discarded

2013-04-22 Thread dan (ddp)
On Mon, Apr 22, 2013 at 11:26 AM, Michiel van Es wrote: > Hello, > > We have found out that we had an Apache webserver showing its has reached > the MaxClients settings. > We could not find the message back in our Splunk interface so I copy/paste > the message into /var/ossec/bin/ossec-logtest and

[ossec-list] Apache MaxClients reached error message discarded

2013-04-22 Thread Michiel van Es
Hello, We have found out that we had an Apache webserver showing its has reached the MaxClients settings. We could not find the message back in our Splunk interface so I copy/paste the message into /var/ossec/bin/ossec-logtest and found out that it is being silenced by the apache_rules.xml rule