[Bro] is there a standars config option for pruning historical logs?

Russell Fulton r.fulton at auckland.ac.nz
Thu Oct 17 16:08:04 PDT 2013


On 18/10/2013, at 12:02 PM, Aashish Sharma <init.conf at gmail.com>
 wrote:

> Russell : 
> 
> Well in broctl.conf: 
> 
> LogExpireInterval = X ;  means how many days (X)  of logs do you want to keep on the disk. 
> 
> Isn't this what you want ? 

Right!!  The 'interval' confused me.  I thought it was the interval between checking!

I thought it odd that some time based expiry was not supported out of the box!

Russell





More information about the Bro mailing list