blog.davidvassallo.me
OSSEC event loss troubleshooting
There is a general consensus that OSSEC will lose events in the event that the main OSSEC server goes offline for whatever reason ( [1] , [2] ) – be it the service is stopped, a network disco…