[Bro] BroControl config to delete instead of archive on rotation
Vlad Grigorescu
vladg at illinois.edu
Thu May 25 12:07:10 PDT 2017
I don't, but you could try just changing broctl.cfg: CompressCmd = rm
Which really is just (very) lossy compression... :-)
I've been discussing the need for more fine-grained log expiration with
a couple of people, but it's hard to give people all the knobs that they
would need.
--Vlad
Josh Liburdi <liburdi.joshua at gmail.com> writes:
> Anyone have experience with configuring BroControl to delete log files instead of archiving them upon rotation? I have a scenario where it's better for me to delete the rotate log files instead of keeping them around.
>
> Thanks!
> Josh
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 800 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170525/7fb2e52d/attachment.bin
More information about the Bro
mailing list