mirror of https://github.com/OISF/suricata
				
				
				
			
			You cannot select more than 25 topics
			Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
		
		
		
		
		
			
		
			
				
	
	
		
			25 lines
		
	
	
		
			472 B
		
	
	
	
		
			ReStructuredText
		
	
			
		
		
	
	
			25 lines
		
	
	
		
			472 B
		
	
	
	
		
			ReStructuredText
		
	
Log Rotation
 | 
						|
============
 | 
						|
 | 
						|
Suricata can generate lot of output, so it's important to manage the files
 | 
						|
to avoid issues with disks filling up.
 | 
						|
 | 
						|
A HUP signal sent to Suricata will force it to reopen the logfiles.
 | 
						|
 | 
						|
Example logrotate file:
 | 
						|
 | 
						|
::
 | 
						|
 | 
						|
  /var/log/suricata/*.log /var/log/suricata/*.json
 | 
						|
  {
 | 
						|
      rotate 3
 | 
						|
      missingok
 | 
						|
      nocompress
 | 
						|
      create
 | 
						|
      sharedscripts
 | 
						|
      postrotate
 | 
						|
              /bin/kill -HUP $(cat /var/run/suricata.pid)
 | 
						|
      endscript
 | 
						|
  }
 | 
						|
 |