[Bro] Log location

Tom OBrion hammadog at gmail.com
Wed Jul 22 04:50:29 PDT 2015

Hello all

I have a very small OS base of 40 gig and a larger new mount point of 1tb for logs.  I have updated the broccoli.cfg to point the logs to the new mount point and logs write to the new mount point with no troubles,  but it looks as thought the spool folder is still filling up my drive.  As soon as I change the spool location to the new mount point,  my daily logs revert back to the default log location.  Can anyone point me in the right direction on this?  


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4802 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150722/72a06360/attachment-0001.bin 

More information about the Bro mailing list