[Bro-Dev] #630: Adding log rotation interval option to broctl.cfg

Bro Tracker bro at tracker.bro-ids.org
Sun Sep 25 19:01:13 PDT 2011


#630: Adding log rotation interval option to broctl.cfg
------------------------------+--------------------
  Reporter:  robin            |      Owner:
      Type:  Feature Request  |     Status:  new
  Priority:  Normal           |  Milestone:  Bro1.6
 Component:  BroControl       |    Version:
Resolution:                   |   Keywords:  beta
------------------------------+--------------------

Comment (by seth):

 > It would be good if the default log rotation interval could be changed
 in
 > ``broctl.cfg``. That seems to be one the few basic options that people
 may
 > want to change (I certainly don't like the 1hr default :).

 Hah, to each his own.  I agree though, it does make sense to have it as a
 broctl.cfg option.

 > But that should only apply to the manager so we can't just add the it to
 > ``auto/broctl-config.bro``. Do we need a separate ``auto/broctl-config-
 > manager.bro``?

 You can do the preprocessor-like trick with the cluster framework.  It may
 make the most sense to just write out some "manager only" parts of the
 broctl-config file.  Like this:

 {{{
 @if ( Cluster::local_node_type() == Cluster::MANAGER )
 ...
 @endif
 }}}

 I would rather avoid creating more autogenerated files if at all possible.
 Readability shouldn't be a problem anyway since the autogenerated scripts
 are never meant to be read by users anyway.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/630#comment:0>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list