Skip to content

Error in ossec log about too many events #3

@6mile

Description

@6mile

I just connected a new agent to my SIPServer and I'm seeing this error in the SIPServer ossec log at /var/ossec/logs/ossec.log:

2018/04/10 16:20:04 ossec-agent: WARNING: Agent buffer at 90 %.
2018/04/10 16:20:07 ossec-agent: WARNING: Agent buffer is full: Events may be lost.
2018/04/10 16:20:22 ossec-agent: WARNING: Agent buffer is flooded: Producing too many events.

What does this mean?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions