Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Log file gzip enhancement idea #360

schenksj opened this issue May 8, 2019 · 1 comment


None yet
3 participants
Copy link

commented May 8, 2019

I'm curious of the communities opinion on the idea of providing the option to writing log files out already gzipped rather than scheduling gzip's when we rotate. This would help keep utilization as flat as possible, especially on heavily loaded machines? Happy to help with a contribution if there is appetite.


This comment has been minimized.

Copy link

commented May 9, 2019

This is already implemented in zeek, but not exposed through broctl (zeekctl!). It's controlled through the LogAscii::gzip_level variable and you can enable compression with redef LogAscii::gzip_level=7;.

I'm going to leave the ticket open since the capability of dealing with compressed logs is not fully exposed in all tooling yet.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.