This is actually something I'm somewhat wondering myself. My instinct says to use something like logrotate but I haven't tested. So far what I did that is working is to put the log on a different volume so it can't fill up the volume with the graylog message journal.
-- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/f0ce6885-d4d1-4e38-b9f6-092917c10a8d%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
