How to stop WAA Real-time Monitoring?

Question:

Customer Environment:

1) OS for WebALARM Agent (WAA): Linux

2) WebALARM (WA) version: v4.3.X

Answer:

Refer to the manual workaround below:

Boot options to set the /usr/local/wa4/wa --port=8079 --syslog=ERROR --disable-realtime --force-uploadscan

A. For Redhat 6 you may use the following procedure:

1. Stop WA: type /sbin/initctl stop wa

2. add the "--disable-realtime" into the wa configuration file

e.g.: exec /usr/local/wa4/wa --port=9999 --syslog=ERROR --disable-realtime

3. Start WA: type /sbin/initctl start wa

B. For Redhat 5/4 you may use the following command:

1. add the "--disable-realtime" into the wa configuration file

e.g.: exec /usr/local/wa4/wa --port=9999 --syslog=ERROR --disable-realtime

2. restart WA: type telinit q

More information:

1. The --force-uploadscan is not needed to stop real-time monitoring. This would only be used when upload changes not being detected and a full scan is required after each upload.

2. Reference：webalarm_usermanual_4.3_EN.pdf　P40