[Bro] Odd log problem - logs get archived as empty
jthoel at gmail.com
Thu Mar 6 16:11:09 PST 2014
# broctl config | grep compress
compresscmd = gzip -9
compressextension = gz
compresslogs = 1
If the variables are blank, wouldn't, worst case, it copy the files in and
just have them be big?
On Fri, Mar 7, 2014 at 12:06 AM, Justin Azoff <JAzoff at albany.edu> wrote:
> On Thu, Mar 06, 2014 at 11:49:46PM +0000, Jeremy Hoel wrote:
> > We are running "bro version 2.2" compiled from source on CentOS 6.5.
> > but when they get cycled out to the normal log archive they become empty
> > files.
> broctl config | grep compress
> What are the variables set to?
> looks like your compresscmd and compressextension options are blank.
> -- Justin Azoff
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro