The file limit set for this agent is 100000

[Adithya Varma]

Hi All,

I encounter this issue. May I know what is causing of this issue?

[Matias Braida]

Hello Adithya,
First of all, thanks for using Wazuh.
Let me check some documentation and I will be back with an answer as soon as possible.
Regards

[Matias Braida]

Hello again,

By default, agents stop adding files to the database once 100k files have been scanned.
To change this limit, you need to change subsection <file_limit> (inside section <syscheck>) in your agents' configuration file.
You can increase the file limit number or even disable this limit.

Please take a look at this link: https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/syscheck.html#file-limit

Keep in mind that if the number of files scanned is increased, then the time for a complete file scan is also increased. If you increase the limit, you may also need also to increase the scan frequency time to set it to an according rate. So that the agent is not constantly scanning the files.

Please let me know if this helps.

Regards