Hey Dan, It seems to me that data regarding events are stored/referenced in multiple tables.
This stops me from just deleting data from a single table as it could affect the rest of the data inside the other tables and end up with an out-of-sync database. Unless I'm horribly mistaken that is. Can any of you guys comment on "how" data should be removed from the Database? Is what Dan suggests sufficient or should we come up with a 'join' and/or 'view' and delete data from there and not directly from a single table? Dimitris -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of dan (ddp) Sent: Tuesday, February 22, 2011 03:52 To: [email protected] Subject: Re: [ossec-list] How to purge/remove/delete data older than a specific date from within the database I think everything in the database it timestamped. You should be able to make a query to delete everything previous to a certain date. On Mon, Feb 21, 2011 at 7:01 AM, Dimitris Chontzopoulos <[email protected]> wrote: > Hello everyone, > > We're trying to remove data from within the OSSEC Database that are older > than a specific date, but we can't find a tool that would > remove that data easily without harming the rest of the database. > > Is there a query of some sort we could run, so as to gather the data we're > interested in and remove them afterwards? > > This might be a stupid question but I'm no MySQL Administrator or 'that' > experienced at all. > > > > > Kind regards, > > > > Dimitris > > >
