[ossec-list] Server maximum thresholds

2017-08-02 Thread LGuerra
Hi guys, I think that my server isn't collecting/analyzing all agent messages. A few days ago I turned off a huge log source and OSSEC started showing a lot more events from the other sources. My guess is that lots of messages are being lost due to OSSEC inability to correlate them all. Is th

Re: [ossec-list] Server maximum thresholds

2017-08-02 Thread dan (ddp)
On Wed, Aug 2, 2017 at 5:21 AM, LGuerra wrote: > Hi guys, > > I think that my server isn't collecting/analyzing all agent messages. A few > days ago I turned off a huge log source and OSSEC started showing a lot more > events from the other sources. My guess is that lots of messages are being > lo