[Bro] LogExpireInterval not respected?

Tyler T. Schoenke tyler.schoenke at colorado.edu
Mon Feb 11 13:34:38 PST 2013


Have you run broctl install && broctl check?    I always forget to do
that after modifying LogExpireInterval.

Tyler

--
Tyler Schoenke
Network Security Program Manager
IT Security Office
University of Colorado at Boulder


On 2/11/13 1:57 PM, Jesse Bowling wrote:
> Hi,
>
> In my /usr/local/bro/etc/broctl.cfg I've specified:
>
> LogExpireInterval = 14
>
> Additionally in /etc/cron.d/bro I've specified:
>
> 0-59/5 * * * * /usr/local/bro/bin/broctl cron
>
> However I've found that I have more daily directories present that 14
> days...What configuration options should I be checking to troubleshoot
> this problem?
>
> Thanks,
>
> Jesse
>
> -- 
> Jesse Bowling
>



More information about the Bro mailing list