How to stop WAA Real-time Monitoring?
Question:
How to stop WAA Real-time Monitoring?
Customer Environment:
1) OS for WebALARM Agent (WAA): Linux
2) WebALARM (WA) version: v4.3.X
Answer:
Refer to the manual workaround below:
Boot options to set the /usr/local/wa4/wa --port=8079 --syslog=ERROR --disable-realtime --force-uploadscan
A. For Redhat 6 you may use the following procedure:
1. Stop WA: type /sbin/initctl stop wa
2. add the "--disable-realtime" into the wa configuration file
e.g.: exec /usr/local/wa4/wa --port=9999 --syslog=ERROR --disable-realtime
3. Start WA: type /sbin/initctl start wa
B. For Redhat 5/4 you may use the following command:
1. add the "--disable-realtime" into the wa configuration file
e.g.: exec /usr/local/wa4/wa --port=9999 --syslog=ERROR --disable-realtime
2. restart WA: type telinit q
More information:
1. The --force-uploadscan is not needed to stop real-time monitoring. This would only be used when upload changes not being detected and a full scan is required after each upload.
2. Reference：webalarm_usermanual_4.3_EN.pdf P40