internal_options.conf: syscheck

Options for the file integrity monitoring daemon (ossec-syscheckd).

Location

All options are set in /var/ossec/etc/internal_options.conf or overridden in /var/ossec/etc/local_internal_options.conf.

Options

• syscheck.sleep

  ossec-syscheckd uses this setting to determine how long to sleep after reading syscheck.sleep_after number of files. By default ossec-syscheckd sleeps for 2 seconds after checking 15 files.

  Default: 2

• syscheck.sleep_after

  ossec-syscheckd reads this many files before sleeping for syscheck.sleep seconds.

  Default: 15