Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improvements in syscheck realtime monitoring #434

Merged
merged 4 commits into from
Mar 11, 2018

Conversation

vikman90
Copy link
Member

@vikman90 vikman90 commented Mar 8, 2018

Related issue: #431

  • Upgrade checksum hash table for every reported file (not only the first time)
  • Internal option syscheck.rt_delay to tune the delay before attending an RT notification. The default configuration decreases the delay from 1 second to 10 milliseconds
  • Granularize syscheck RT process from 5 minutes to 1 second. This will make the frequency option more accurate.
  • Allow to speed up the startup time: formula changed from tsleep + 10 to tsleep * 5. The actual delay will remain for the default configuration, but this formula allows to null the time if syscheck.sleep is set to 0 in the internal options.

@vikman90 vikman90 added the type/enhancement New feature or request label Mar 8, 2018
@albertomn86 albertomn86 merged commit 95000ca into master Mar 11, 2018
@albertomn86 albertomn86 deleted the dev-syscheck-updatedb branch March 11, 2018 02:41
@vikman90 vikman90 added the module/fim File Integrity Monitoring label Jun 19, 2018
@soynof soynof mentioned this pull request Aug 7, 2023
4 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
module/fim File Integrity Monitoring type/enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants