Tips for linux real time detection setting

Tips for linux real time detection setting

Question:
We have plan to let WAA monitor tons of files.
Any tips for linux real time detection setting?

Answer:
Can you refer and set following options.

1. max_queued_events

- Settings recommendation: 3x max_user_watches +20% buffer
e.g. 90,000 is fine when 25,000 files will be monitored.

2. max_user_watches and --auto-watch-limit

- Settings recommendation: 120% of expected monitored files for max_user_watches.
e.g. 30,000 is fine when 25,000 files will be monitored.
- Using --auto-watch-limit is highly recommended if customer’s version has it.

More Information:
The user manual has basic explanation of options and how to set them.

    • Related Articles

    • Linux kernel upgrade for real-time monitoring to work

      Question: Is there a need to reinstall WebALARM after a Linux kernel upgrade for real-time monitoring to work? Answer: No. There is no need to reinstall WebALARM agent for Linux after a kernel upgrade. More Information: This feature is available for ...

    • What is the minimum kernel version requirement for WebALARM Linux real-time monitoring?

      Question: What is the minimum kernel version requirement for WebALARM Linux real-time monitoring?   Answer: For real-time monitoring in Linux, the minimum supported kernel version is 2.6.15. Any CentOS/RHEL version 5 or above would meet the ...

    • How to stop WAA Real-time Monitoring?

      Question: How to stop WAA Real-time Monitoring?   Customer Environment: 1) OS for WebALARM Agent (WAA): Linux 2) WebALARM (WA) version: v4.3.X   Answer: Refer to the manual workaround below: Boot options to set the /usr/local/wa4/wa --port=8079 ...

    • How to install WebALARM agent on 64bit Linux operating system?

      Question: How to install WebALARM agent on 64bit Linux operating system?   Answer: WebALARM agent requires 32-bit libraries to work on 64-bit Linux platforms. Please ensure the following libraries are installed before installing WebALARM agent: ...

    • Does WebALARM requires root privileges to run in Linux environment?

      Question: Does WebALARM requires root privileges to run in Linux environment?   Answer: Yes. Under UNIX environment, 'root' privilege is required by WebALARM for its operation to access files owned by various owners in the local filesystem. In ...