Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Multiple logs to show the same configuration warning message #15188

Closed
jmv74211 opened this issue Oct 18, 2022 · 0 comments · Fixed by #15278
Closed

Multiple logs to show the same configuration warning message #15188

jmv74211 opened this issue Oct 18, 2022 · 0 comments · Fixed by #15278
Assignees
Labels
reporter/qa QA Team: Reporting possible bug

Comments

@jmv74211
Copy link
Contributor

Wazuh version Component Install type Install method Platform
4.4.0-40400 wazuh-analysisd Manager Packages Ubuntu focal

Description

When starting the wazuh-manager with the EPS limitation block but without the <maximum> tag, multiple warnings come up, flooding the log and proving annoying.

2022/10/18 09:42:09 wazuh-maild: WARNING: EPS limit disabled. The maximum value is missing in the configuration block.
2022/10/18 09:42:09 wazuh-maild: WARNING: EPS limit disabled. The maximum value is missing in the configuration block.
2022/10/18 09:42:09 wazuh-analysisd: WARNING: EPS limit disabled. The maximum value is missing in the configuration block.
2022/10/18 09:42:10 wazuh-remoted: WARNING: EPS limit disabled. The maximum value is missing in the configuration block.
2022/10/18 09:42:10 wazuh-monitord: WARNING: EPS limit disabled. The maximum value is missing in the configuration block.
2022/10/18 09:42:10 wazuh-testrule: WARNING: EPS limit disabled. The maximum value is missing in the configuration block.
2022/10/18 09:42:14 wazuh-analysisd: WARNING: EPS limit disabled. The maximum value is missing in the configuration block.
2022/10/18 09:42:15 wazuh-remoted: WARNING: EPS limit disabled. The maximum value is missing in the configuration block.
2022/10/18 09:42:17 wazuh-monitord: WARNING: EPS limit disabled. The maximum value is missing in the configuration block.

It is requested to improve this behavior, so that only a single log message is displayed.

Steps to reproduce

  • Add the following configuration block to the <global> section of ossec.conf (missing <maximum>)
<limits>
  <eps>
    <timeframe>30</timeframe>
  </eps>
</limits>
  • Restart the wazuh-manager and check logs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
reporter/qa QA Team: Reporting possible bug
Projects
No open projects
Status: Done
Development

Successfully merging a pull request may close this issue.

3 participants