[sysmon-help] Maxqueued at Sysmon

[Morgan Aldridge]

On Thu, Mar 19, 2009 at 11:49 PM, Chai Lin <taycl at antlabs.com> wrote:
>
> Thanks for all the reply. I’m a newbie for sysmon. So just a quick check, if
> maxqueued => 350 and the queuetime =300, will it be fine?

I'd think so. With the queuetime set to 5 minutes, I doubt you'd even
need to change maxqueued at all.

Morgan Aldridge
---
morgant at makkintosshu.com
http://www.makkintosshu.com/