Hey, You mean the internal log files or the database output to mysql/postgresql? For the local logs, just delete them from /var/ossec/logs/alerts/Year/Month/ (easy to script).
Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Thu, Jan 14, 2010 at 10:26 AM, <[email protected]> wrote: > hi > i have a simple easy question, how could i purge database ? > as it keeps growing, any easy facilities to remove very old alerts ? > and big thanks, ossec is really a good tool. > thanks > > >
