Hello, I try to find some documentation on OSSEC logs rotate, but I don't found any answer. I saw that OSSEC rotates some of its own logs as alerts, archive and firewall. The rotates are made every day into compressed files in a subfolder. But what I understand, is that the rotate files are always keep, and never deleted, right ? There is no way to tell OSSEC to delete those files every months for example ? (if I want to keep one month log) Or to not rotate the files at all, so I can use logrotate directly on it.
And then, the ossec.log file seems to not be rotate. Can I do a log rotate on it (with logrotate for instance) without having to restart ossec-hids ? Or if I rotate this file, I have to restart ossec ? I tried to find answers on the ossec-list group, but I didn't find anything relevant on it. Thanks a lot, Regards, Kevin. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
