Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Log file gzip enhancement idea #360

Open
schenksj opened this issue May 8, 2019 · 1 comment

Comments

Projects
None yet
3 participants
@schenksj
Copy link

commented May 8, 2019

I'm curious of the communities opinion on the idea of providing the option to writing log files out already gzipped rather than scheduling gzip's when we rotate. This would help keep utilization as flat as possible, especially on heavily loaded machines? Happy to help with a contribution if there is appetite.

@sethhall

This comment has been minimized.

Copy link
Member

commented May 9, 2019

This is already implemented in zeek, but not exposed through broctl (zeekctl!). It's controlled through the LogAscii::gzip_level variable and you can enable compression with redef LogAscii::gzip_level=7;.

I'm going to leave the ticket open since the capability of dealing with compressed logs is not fully exposed in all tooling yet.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.