The statistical file for ossec-agentd is located at
This file provides information about the agent as the number of generated events, last connection, agent status and some other useful information.
By default, this file is updated every 5 seconds. This interval can be changed by modifying the
agent.state_interval value from the internal configuration file.
This file is created the first time the agent connects to the manager.
Below there is an example of the content of the file:
# State file for ossec-agentd # Agent status: # - pending: waiting for get connected. # - connected: connection established with manager in the last 5 seconds. # - disconnected: connection lost or no ACK received in the last 5 seconds. status='connected' # Last time a keepalive was sent last_keepalive='2019-02-05 12:18:37' # Last time a control message was received last_ack='2019-02-05 12:18:37' # Number of generated events msg_count='12579' # Number of messages (events + control messages) sent to the manager msg_sent='12928'