This is the documentation for Wazuh 3.8. Check out the docs for the latest version of Wazuh!

ossec-remoted state file

The statistical file for ossec-remoted is ossec-remoted.state and it’s located under the Wazuh installation directory (/var/ossec/var/run/ossec-remoted.state).

This file provides information about the ossec-remoted daemon like the queue size, discarded messages or the number of TCP sessions among others. By default, this file is updated every 5 seconds but this interval can be changed with the remoted.state_interval variable in the internal_options.conf file. For further information please visit the internal configuration page.

Note

The ossec-remoted.state statistical file is only available in managers.

Below you can see an example file:

# State file for ossec-remoted
# Updated every 5 seconds.

# Queue size
queue_size='0'

# Total queue size
total_queue_size='131072'

# TCP sessions
tcp_sessions='0'

# Events sent to Analysisd
evt_count='7383'

# Control messages received
ctrl_msg_count='270'

# Discarded messages
discarded_count='0'

# Messages sent
msg_sent='1267'