Using OSSEC - huge size of /var/ossec/queue/diff
I’m using OSSEC on my Ubuntu server. I saw that the disk was almost full. I searched for the biggest folders and I found out that the folder
/var/ossec/queue/diff was really huge and filling all the disk.
Is it normal? Is there a setting on OSSEC to prevent this from happening?