Skip to content

Conversation

@proditis
Copy link
Contributor

@proditis proditis commented Dec 4, 2015

Introduce event for archive rotation of logs along with a couple of new sysconf flags.

The new flags

  • archive_rotate: [yes,no] Activate archive rotation operations ?
  • archive_delete_use_mem: [yes,no] Use ENGINE=MEMORY for the archive ID selection table. Use this option with caution.
  • archive_delete_days: (default: 7), Number of days older entries will be deleted
  • archive_delete_limit: (default: 0), Limit delete operations to a specific set of archive entries. No more than archive_delete_limit entries will be deleted.

Note that the archive rotation does not delete entries that:

  • are used as evidence for the abuser module
  • haven't been processed yet by the archive parser
  • still exist on the syslog table/view (syslog/logs)

proditis added a commit that referenced this pull request Dec 4, 2015
Introduce event for archive rotation of logs
@proditis proditis merged commit 6a18605 into echothrust:master Dec 4, 2015
@gadamo gadamo mentioned this pull request Dec 4, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant