[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ossec-list] Re: Sending agents logs every 30 min
- To: ossec-list@xxxxxxxxxxxxxxxx
- Subject: [ossec-list] Re: Sending agents logs every 30 min
- From: "Daniel Cid" <daniel.cid@xxxxxxxxx>
- Date: Sun, 9 Sep 2007 22:13:50 -0300
- Authentication-results: mx.google.com; spf=pass (google.com: domain of daniel.cid@xxxxxxxxx designates 64.233.166.177 as permitted sender) smtp.mail=daniel.cid@xxxxxxxxx; dkim=pass (test mode) header.i=@xxxxxxxxx
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=7Z+Q/lPg+arzkZcK3JRhU2NOJqmt0RWB+awoZhiI7tU=; b=YEzIBl39H0+THsBnVLBy5XvgspShhHXO4y9Jillawo1WJ/9kyhdhooSfek0/5AW5Q/w8pmjvgw3If81LTecr2i9cJPlm/UhacQLR5GTV+cxUcpNCN+unI2bpcvNwvaShLdoL8blBKk8KeKpyf+wa72LL8is6TN7m6nUOSaranYM=
Hi,
Yes, it is possible, but not recommended. Is there any specific reason
for doing that? In 30 minutes a lot can happen and you will get a
burst of traffic in a small period of time...
Anyway, just to go to internal_options.conf (on the agent side) and increase:
logcollector.loop_timeout=2
To any large number (in seconds).
Hope it helps.
--
Daniel B. Cid
dcid ( at ) ossec.net
On 9/6/07, carlopmart <carlopmart@xxxxxxxxx> wrote:
>
> Hi all
>
> Somebody knows if it is possible with ossec 1.3 to send agent logs to
> server every 30 min. for example? And Can an agent wait until server is
> up after system server down??
>
> Many thanks.
>
> --
> CL Martinez
> carlopmart {at} gmail {d0t} com
>
OSSEC home |
Main Index |
Thread Index
OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.