Memory and CPU requirement for Ossec Server/Client architecture

[Ankush Grover]

Hi All,

I am trying to setup Ossec for my organization in the Server/Client architecture. The server will run on Centos 5.x and around 20 agents will run on Linux servers. I would like to know the Memory and CPU Requirements for Server and for agent on each host.

Ossec 2.5.1 will be used for both server and agent


Regards

Ankush

[Cristian Paul Peñaranda Rojas]

How many logs do you expect to collect per day, or per second, do you
have this measurements?

Btw ossec can run in comodly hardware with no pain :)

[Ankush Grover]

On Thu, Nov 18, 2010 at 9:39 PM, Cristian Paul Peñaranda Rojas <pa...@kristianpaul.org> wrote:

How many logs do you expect to collect per day, or per second, do you
have this measurements?

Currently I don't have much idea, however most of the servers are webservers exposed to Internet and are heavily used.

Is there any measurements already listed somewhere that will give me some idea

Regards

Ankush

 

Btw ossec can run in comodly hardware with  no pain :)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkzlT6cACgkQOAZrK37R8yKg6QCg2XOWOhpKlIKXOSYe7Uzp+7l3
BI0AniJCnhzhQDi4nXIGxwkZHsLml1Ys
=MbX4
-----END PGP SIGNATURE-----

[Jeremy Rossi]

http://groups.google.com/group/ossec-list/browse_thread/thread/224408b3f6b034a8/a9c81a7f95a1c2f0?lnk=gst&q=Eps#a9c81a7f95a1c2f0

Check out the past discussion on ossec-list, but in the end you will need to do your own starting.

With ossec 20 agents is very little overhead. As others said have said it's all about the amounts of logs.