This is the documentation for Wazuh 2.1. Check out the docs for the latest version of Wazuh!


XML section name


Configure the agent bucket parameters in order to avoid events flooding.



This parameter allows to disable the Agent Buffer and send events to the manager without any congestion control.

Default value no
Allowed values The options accepted are yes and no.


Disabling this functionality in large environments, agents may collapse the manager and the network.


The capacity of Agent Buffer in number of events.

Default value 5000
Allowed values Any number between 1 and 100000.


Specifies the number of events sent to the manager per second.

Default value 500
Allowed values Any number between 1 and 1000.

Default configuration

  <!-- Agent buffer options -->