Maximum Value for q_depth

Tue Nov 30 23:04:28 UTC 2021

I am currently seeing a lot of auditd dispatch error issues. It is related
to a particular keyed rule that from the looks of it is generating close to
a million events /day. I have seen previous answers where it was advised to
increase the q_depth value to a suitable number.

Based on this, I would like to confirm what is the maximum advisable value
q_depth can have/take?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20211130/6de8ac42/attachment.htm>