Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add new setting in FIM whodata Linux, queue_size #5941

Closed
Tracked by #13920
jotacarma90 opened this issue Feb 23, 2023 · 2 comments · Fixed by #5942
Closed
Tracked by #13920

Add new setting in FIM whodata Linux, queue_size #5941

jotacarma90 opened this issue Feb 23, 2023 · 2 comments · Fixed by #5942
Assignees
@jotacarma90
Labels
level/task Task issue module/fim pending-core team/core/watchdogs type/bug Bug issue

Comments

@jotacarma90
Copy link
Member

jotacarma90 commented Feb 23, 2023 •
edited
Loading

Description

Hello team,
We have included a new setting in FIM whodata, in the <whodata> section:
https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/syscheck.html#whodata

Issue related: wazuh/wazuh#13920
PR related: wazuh/wazuh#16200

This setting controls the size of the buffer we are using to store logs coming from audit, so that this way we don't have to block the thread that receives the logs from the audit dispatcher.

Default value: 16384
Minimum value: 10
Max value: 1048576

Thanks, greetings!
@jotacarma90 jotacarma90 self-assigned this Feb 23, 2023
@jotacarma90 jotacarma90 mentioned this issue Feb 23, 2023
Merged
10 tasks
@jotacarma90 jotacarma90 changed the title Add new setting in FIM whodata Linux, whodata_queue_size Add new setting in FIM whodata Linux, queue_size Feb 24, 2023
@jotacarma90 jotacarma90 linked a pull request Feb 24, 2023 that will close this issue
Add new setting queue_size inside whodata configuration block #5942
Merged
7 tasks
@jotacarma90 jotacarma90 mentioned this issue Feb 27, 2023
Closed
@vikman90 vikman90 added the level/task Task issue label Mar 17, 2023
@havidarou havidarou added type/enhancement Enhancement issue type/bug Bug issue and removed type/enhancement Enhancement issue labels Apr 24, 2023
@vikman90 vikman90 mentioned this issue May 31, 2023
Closed
3 tasks
@jotacarma90
Copy link
Member Author

Delayed the ETA of this issue due to a blockage waiting for the merge of the IT testing issue, by the QA team:

@jotacarma90
Copy link
Member Author

wazuh/wazuh#13920 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jotacarma90 jotacarma90

Labels
level/task Task issue module/fim pending-core team/core/watchdogs type/bug Bug issue
Projects
No open projects
Release 4.8.0
Archived in project
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add new setting queue_size inside whodata configuration block wazuh/wazuh-documentation
4 participants
@havidarou @vikman90 @chemamartinez @jotacarma90