intrusion detection: rotate eve-log every (almost) 500 MB

Should probably remove the weekly/daily rotation in favour of a
setting of the value in KB on the GUI instead...
This commit is contained in:
Franco Fichtner 2016-11-30 07:26:33 +01:00
parent 3983919a02
commit 19dfa96cc2

View File

@ -2,7 +2,7 @@
{% if helpers.exists('OPNsense.IDS.general') and OPNsense.IDS.general.enabled|default("0") == "1" %}
/var/log/suricata/stats.log root:wheel 640 7 * $D0 B /var/run/suricata.pid 1
/var/log/suricata.log root:wheel 640 7 * $D0 B /var/run/suricata.pid 1
/var/log/suricata/eve.json root:wheel 640 {{ OPNsense.IDS.general.AlertSaveLogs|default("4") }} * ${{
/var/log/suricata/eve.json root:wheel 640 {{ OPNsense.IDS.general.AlertSaveLogs|default("4") }} 500000 ${{
OPNsense.IDS.general.AlertLogrotate|default("W0D23")
}} B /var/run/suricata.pid 1
{% endif %}