On Mon, Dec 5, 2011 at 8:33 AM, mikes <[email protected]> wrote: > Hi, > > i have problem with huge folders with diffs (/var/ossec/queue/diff). > > I'm monitoring log files (/var/log/* and ... tomcat catalina out's > /var/log/tomcat6/catalina.out - this log have > 100MB per day). > > Ossec make many diff files per one monitored file. > > My question is: can i change number of old diff files? > > regards.
You'll have to modify the source.
