[Bro-Dev] #613: Problem with LogExpireInterval setting in BroControl
Bro Tracker
bro at tracker.bro-ids.org
Mon Oct 31 12:38:49 PDT 2011
#613: Problem with LogExpireInterval setting in BroControl
-------------------------+--------------------
Reporter: seth | Owner:
Type: Problem | Status: new
Priority: Normal | Milestone: Bro2.0
Component: BroControl | Version:
Resolution: | Keywords:
-------------------------+--------------------
Comment (by jsiwek):
Replying to [ticket:613 seth]:
> It doesn't seem to work. It should be deleting logs, but the logs are
still there.
This works for me. It's dependent on `broctl cron`, though, did you have
that running? And it also checks actual file modification times so if you
tried to simply cheat it by renaming directories that doesn't work, you
have to `touch -m -t` stuff.
> I also wonder if we should have this turned off by default? I'd rather
not have people surprised when their logs start disappearing after a month
(the default setting is 30 days).
Yeah, I think just commenting it out in `broctl.cfg` might be good. I'll
do that and put it on fastpath.
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/613#comment:1>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list