Hi, I know, it's not what you are saying exactly. I just wrote some code to compress previous day's alert file (/var/ossec/log/alerts/...) after the day change, and Daniel commited it to CVS. I think this feature will be available in next version.
Regards, Ahmet Ozturk. Forrest Aldrich wrote: > With regard to the logs under /var/ossec, does the daemon do any log > rotation, or should we configure this in newsyslog.conf. > > > _F > > > --~--~---------~--~----~------------~-------~--~----~ -~----------~----~----~----~------~----~------~--~---
