Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Events per second limits added to ossec.conf global section #5346

Merged
merged 8 commits into from
Oct 19, 2022

Conversation

cborla
Copy link
Member

@cborla cborla commented Jun 14, 2022

Related issue
wazuh/wazuh#12512

Description

The main goal of this document, is describes the configuration of a new feature implemented to manage the amount of EPS (events per second) that manager can process.

Configuration options

<global>
  <limits>
    <eps>
      <maximum>500</maximum>
      <timeframe>30</timeframe>
    </eps>
  </limits>
</global>

Checks

  • It compiles without warnings.
  • Spelling and grammar.
  • Used impersonal speech.
  • Used uppercase only on nouns.
  • Updated the redirect.js script if necessary (check this guide).

@branchnetconsulting
Copy link
Contributor

I'm just trying to understand here, but what would be a real use case for configuring a Wazuh manager to artificially limit the rate of events it processes to less than its hardware is actually capable of? I understand the point of agents self limiting their eps forwarding rate, but don't immediately appreciate how a similar rate limit would be of benefit implemented at the manager level.

@TomasTurina TomasTurina changed the base branch from develop to 4.4 July 5, 2022 15:32
Copy link
Contributor

@s-ocando s-ocando left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please review the following suggestions.

source/user-manual/reference/ossec-conf/global.rst Outdated Show resolved Hide resolved
source/user-manual/reference/ossec-conf/global.rst Outdated Show resolved Hide resolved
source/user-manual/api/configuration.rst Outdated Show resolved Hide resolved
source/user-manual/api/configuration.rst Outdated Show resolved Hide resolved
source/user-manual/api/configuration.rst Outdated Show resolved Hide resolved
cborla and others added 2 commits August 24, 2022 09:24
Co-authored-by: Sandra Ocando <sandra.ocando@wazuh.com>
Co-authored-by: Sandra Ocando <sandra.ocando@wazuh.com>
@cborla cborla requested a review from s-ocando August 24, 2022 12:24
Copy link
Contributor

@s-ocando s-ocando left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@vikman90 vikman90 merged commit 30255d7 into 4.4 Oct 19, 2022
@vikman90 vikman90 deleted the dev-cloud-limits branch October 19, 2022 09:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

7 participants