[ossec-list] Re: Log rotation

["Daniel Cid" <daniel.cid@xxxxxxxxx>]

Hi Forrest (and Ahmet),

Every ossec alert/log file is rotated daily, so you don't need to worry
about it.

An example of alert log:
/var/ossec/logs/alerts/2006/Jul/ossec-alerts-17.log

*The only file that is not rotated is the ossec.log. However, it generally
is very small, so you probably don't need to worry about it.

*Compression will be enabled by default starting on the next version
(great job Ahmet!).

thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net

On 7/17/06, oahmet <oahmet@xxxxxxxxxxx> wrote:
>
> Hi,
>
> I know, it's not what you are saying exactly.
> I just wrote some code to compress previous day's alert file
> (/var/ossec/log/alerts/...) after the day change,
> and Daniel commited it to CVS. I think this feature will be available
> in next version.
>
> Regards,
>
> Ahmet Ozturk.
>
> Forrest Aldrich wrote:
> > With regard to the logs under /var/ossec, does the daemon do any log
> > rotation, or should we configure this in newsyslog.conf.
> >
> >
> > _F
> >
> >
> >
>
> >
>

--~--~---------~--~----~------------~-------~--~----~
-~----------~----~----~----~------~----~------~--~---