[Bro] is there a standars config option for pruning historical logs?
Russell Fulton
r.fulton at auckland.ac.nz
Thu Oct 17 16:08:04 PDT 2013
On 18/10/2013, at 12:02 PM, Aashish Sharma <init.conf at gmail.com>
wrote:
> Russell :
>
> Well in broctl.conf:
>
> LogExpireInterval = X ; means how many days (X) of logs do you want to keep on the disk.
>
> Isn't this what you want ?
Right!! The 'interval' confused me. I thought it was the interval between checking!
I thought it odd that some time based expiry was not supported out of the box!
Russell
More information about the Bro
mailing list