[Bro] BroControl config to delete instead of archive on rotation

Daniel Thayer dnthayer at illinois.edu
Thu May 25 12:52:56 PDT 2017


On 5/25/17 2:07 PM, Vlad Grigorescu wrote:
> I don't, but you could try just changing broctl.cfg: CompressCmd = rm
>
> Which really is just (very) lossy compression... :-)
>

Doing that would result in an archived log file of zero length.
To truly delete the log would currently require modifications
to the archive-log script.



More information about the Bro mailing list