{"action":"created","issue":{"url":"https://api.github.com/repos/wazuh/ossec-wazuh/issues/10","repository_url":"https://api.github.com/repos/wazuh/ossec-wazuh","labels_url":"https://api.github.com/repos/wazuh/ossec-wazuh/issues/10/labels{/name}","comments_url":"https://api.github.com/repos/wazuh/ossec-wazuh/issues/10/comments","events_url":"https://api.github.com/repos/wazuh/ossec-wazuh/issues/10/events","html_url":"https://github.com/wazuh/ossec-wazuh/issues/10","id":127613874,"number":10,"title":"OSSEC HA","user":{"login":"netflash","id":2478391,"avatar_url":"https://avatars.githubusercontent.com/u/2478391?v=3","gravatar_id":"","url":"https://api.github.com/users/netflash","html_url":"https://github.com/netflash","followers_url":"https://api.github.com/users/netflash/followers","following_url":"https://api.github.com/users/netflash/following{/other_user}","gists_url":"https://api.github.com/users/netflash/gists{/gist_id}","starred_url":"https://api.github.com/users/netflash/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/netflash/subscriptions","organizations_url":"https://api.github.com/users/netflash/orgs","repos_url":"https://api.github.com/users/netflash/repos","events_url":"https://api.github.com/users/netflash/events{/privacy}","received_events_url":"https://api.github.com/users/netflash/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":10,"created_at":"2016-01-20T06:15:09Z","updated_at":"2016-09-01T17:01:47Z","closed_at":null,"body":"Hello guys,\r\n\r\nthanks for what you have had done. \r\nThis is a wonderful job.\r\n\r\nI have a question about High Availability - do you have any experience for multiple servers that could be shared ?\r\n\r\nAccording to this https://groups.google.com/forum/#!topic/ossec-list/TYCfLxNGwlw\r\nLooks like it's not too complicated, since your version of OSSEC proxies everything into ELK.\r\nthe only thing that has to be shared is clients.key.\r\n\r\nMaybe you can give me some advice.\r\n\r\nThanks again.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/wazuh/ossec-wazuh/issues/comments/244144090","html_url":"https://github.com/wazuh/ossec-wazuh/issues/10#issuecomment-244144090","issue_url":"https://api.github.com/repos/wazuh/ossec-wazuh/issues/10","id":244144090,"user":{"login":"netflash","id":2478391,"avatar_url":"https://avatars.githubusercontent.com/u/2478391?v=3","gravatar_id":"","url":"https://api.github.com/users/netflash","html_url":"https://github.com/netflash","followers_url":"https://api.github.com/users/netflash/followers","following_url":"https://api.github.com/users/netflash/following{/other_user}","gists_url":"https://api.github.com/users/netflash/gists{/gist_id}","starred_url":"https://api.github.com/users/netflash/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/netflash/subscriptions","organizations_url":"https://api.github.com/users/netflash/orgs","repos_url":"https://api.github.com/users/netflash/repos","events_url":"https://api.github.com/users/netflash/events{/privacy}","received_events_url":"https://api.github.com/users/netflash/received_events","type":"User","site_admin":false},"created_at":"2016-09-01T17:01:47Z","updated_at":"2016-09-01T17:01:47Z","body":"As for symlinks - correct me if I'm wrong, but doesn't that processes run in kinda 'chroot' environment ? (see #11) and that's why from the process point of view this symlink points to nowhere.\r\nCould you please test this by moving the original file somewhere into the chroot environment and create a symlink something like `../../file` - I mean relative path.\r\n\r\nAnd as for the time in between switching - that could take about 65 seconds and there should be a parameter about this timer.\r\nSo from my observation there always would be some gap / data lost :-( "}}
{"actor":{"display_login":"netflash"}}