Skip to content

Error in ossec log about too many events #3

@6mile

Description

@6mile

I just connected a new agent to my SIPServer and I'm seeing this error in the SIPServer ossec log at /var/ossec/logs/ossec.log:

2018/04/10 16:20:04 ossec-agent: WARNING: Agent buffer at 90 %.
2018/04/10 16:20:07 ossec-agent: WARNING: Agent buffer is full: Events may be lost.
2018/04/10 16:20:22 ossec-agent: WARNING: Agent buffer is flooded: Producing too many events.

What does this mean?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions