[Bro] BroControl config to delete instead of archive on rotation

[Josh Liburdi]

Thanks Vlad, that's an interesting suggestion. We're looking to minimize
unnecessary file activity, so having an explicit option to delete instead
of archive could be useful for some.

On Thu, May 25, 2017 at 3:07 PM, Vlad Grigorescu <vladg at illinois.edu> wrote:

> I don't, but you could try just changing broctl.cfg: CompressCmd = rm
>
> Which really is just (very) lossy compression... :-)
>
> I've been discussing the need for more fine-grained log expiration with
> a couple of people, but it's hard to give people all the knobs that they
> would need.
>
>   --Vlad
>
> Josh Liburdi <liburdi.joshua at gmail.com> writes:
>
> > Anyone have experience with configuring BroControl to delete log files
> instead of archiving them upon rotation? I have a scenario where it's
> better for me to delete the rotate log files instead of keeping them around.
> >
> > Thanks!
> > Josh
> > _______________________________________________
> > Bro mailing list
> > bro at bro-ids.org
> > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170525/d835526c/attachment.html