David, Eero is right that disk space is relatively quite inexpensive these days; I think lots of us are more concerned with log retention against future audit needs than with disk usage. Anyway, it's pretty easy to set up cron scripts for log file cleanups.
To address your question, I don't think we have a STDIN; maybe you would be more interested to have OSSEC receive the syslog directly instead of "buffering" it through the regular syslogd. thanks; Rick On Monday, December 8, 2014 5:26:05 PM UTC-5, Eero Volotinen wrote: > > > > >> I'm looking to avoid having to worry about disk space for this sort of >> config. >> >> > You must be joking? Disk space is _very_ cheap nowadays and it's also > possible to use compression .. > > -- > Eero > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
