[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ossec-dev] [Bug 36] New: Wrong message "Excessive number of events (above normal)."



http://www.ossec.net/bugs/show_bug.cgi?id=36

           Summary: Wrong message "Excessive number of events (above
                    normal)."
           Product: OSSEC
           Version: 1.0
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P1
         Component: ossec core
        AssignedTo: ossec-dev@xxxxxxxxx
        ReportedBy: wilfried.werner@xxxxxxxxxxxxxxxxx


Hello,
since I upgrade from 0.9.3 to 1.0 I sometimes get the following message:

OSSEC HIDS Notification.
2007 Jan 22 13:19:05

Received From: (mailint) xxx.xx.xx.xx->/var/log/everything/current
Rule: 11 fired (level 8) -> "Excessive number of events (above normal)."
Portion of the log(s):

Jan 22 13:19:05 [lmtpunix] sieve: discarded message to .....

 --END OF NOTIFICATION

The portion of the log(s) vary every time. With version 0.9.3 I got messages
which told me how many events are normal and how many are actual

Wilfried


-- 
Configure bugmail: http://www.ossec.net/bugs/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.


OSSEC home | Main Index | Thread Index


OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.