[Bro-Dev] #613: Problem with LogExpireInterval setting in BroControl

Bro Tracker bro at tracker.bro-ids.org
Mon Oct 31 12:38:49 PDT 2011


#613: Problem with LogExpireInterval setting in BroControl
-------------------------+--------------------
  Reporter:  seth        |      Owner:
      Type:  Problem     |     Status:  new
  Priority:  Normal      |  Milestone:  Bro2.0
 Component:  BroControl  |    Version:
Resolution:              |   Keywords:
-------------------------+--------------------

Comment (by jsiwek):

 Replying to [ticket:613 seth]:
 > It doesn't seem to work.  It should be deleting logs, but the logs are
 still there.

 This works for me.  It's dependent on `broctl cron`, though, did you have
 that running?  And it also checks actual file modification times so if you
 tried to simply cheat it by renaming directories that doesn't work, you
 have to `touch -m -t` stuff.

 > I also wonder if we should have this turned off by default?  I'd rather
 not have people surprised when their logs start disappearing after a month
 (the default setting is 30 days).

 Yeah, I think just commenting it out in `broctl.cfg` might be good.  I'll
 do that and put it on fastpath.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/613#comment:1>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list