Hi Forrest (and Ahmet), Every ossec alert/log file is rotated daily, so you don't need to worry about it.
An example of alert log: /var/ossec/logs/alerts/2006/Jul/ossec-alerts-17.log *The only file that is not rotated is the ossec.log. However, it generally is very small, so you probably don't need to worry about it. *Compression will be enabled by default starting on the next version (great job Ahmet!). thanks, -- Daniel B. Cid dcid ( at ) ossec.net On 7/17/06, oahmet <[EMAIL PROTECTED]> wrote: > > Hi, > > I know, it's not what you are saying exactly. > I just wrote some code to compress previous day's alert file > (/var/ossec/log/alerts/...) after the day change, > and Daniel commited it to CVS. I think this feature will be available > in next version. > > Regards, > > Ahmet Ozturk. > > Forrest Aldrich wrote: > > With regard to the logs under /var/ossec, does the daemon do any log > > rotation, or should we configure this in newsyslog.conf. > > > > > > _F > > > > > > > > > > --~--~---------~--~----~------------~-------~--~----~ -~----------~----~----~----~------~----~------~--~---
