High CPU usage ossec-syscheckd

proinagltd1 · **Posted:** Thu Aug 02, 2012 12:02 pm

Hello All

Our dedicated server looks to be getting overloaded by ossec-syscheckd. Any ideas of a solution?

Code:

Cpu(s): 25.1%us,  1.4%sy,  0.0%ni, 73.4%id,  0.1%wa,  0.0%hi,  0.0%si,  0.0%st
Mem:   4117376k total,  3907256k used,   210120k free,   185028k buffers
Swap:  2040244k total,    98824k used,  1941420k free,  2787248k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
25279 root      20   0  8488 7360  604 R 100.0  0.2 335:51.63 ossec-syscheckd
 6109 root      39  19     0    0    0 S  2.4  0.0   4010:01 kipmi0
26717 apache    20   0  139m  74m 5100 S  0.7  1.9   0:00.10 httpd
25264 ossec     20   0  3512 2272  620 S  0.6  0.1  22:23.67 ossec-analysisd

Kind regards

Graham

mikeshinn · **Posted:** Thu Aug 02, 2012 1:03 pm

It could be many things, so we've put together FAQ to help you with this:

https://www.atomicorp.com/wiki/index.ph ... lot_of_CPU

Please let us know how we can assist you.

proinagltd1 · **Posted:** Fri Aug 03, 2012 7:09 am

Many Thanks

I have added the line below running tests now looks promising.

Code:

How frequently does the setting file get over written?

Kind regards,

Graham

High CPU usage ossec-syscheckd

Who is online