[Bro] BroControl config to delete instead of archive on rotation

Vlad Grigorescu vladg at illinois.edu
Thu May 25 12:07:10 PDT 2017


I don't, but you could try just changing broctl.cfg: CompressCmd = rm

Which really is just (very) lossy compression... :-)

I've been discussing the need for more fine-grained log expiration with
a couple of people, but it's hard to give people all the knobs that they
would need.

  --Vlad

Josh Liburdi <liburdi.joshua at gmail.com> writes:

> Anyone have experience with configuring BroControl to delete log files instead of archiving them upon rotation? I have a scenario where it's better for me to delete the rotate log files instead of keeping them around.
>
> Thanks!
> Josh
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 800 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170525/7fb2e52d/attachment.bin 


More information about the Bro mailing list