CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add logrotate

Browse Source
This commit is contained in:
Wes
2023-07-19 15:17:42 +00:00
parent 30a14f8aaf
commit 0b19179630
2 changed files with 20 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
salt/logrotate/defaults.yaml
View File

@@ -90,7 +90,7 @@ logrotate:
- extension .log - extension .log
- dateext - dateext
- dateyesterday - dateyesterday
/opt/so/log/fleet/*_x_log: /opt/so/log/elasticfleet/*_x_log:
- daily - daily
- rotate 14 - rotate 14
- missingok - missingok
@@ -100,6 +100,16 @@ logrotate:
- extension .log - extension .log
- dateext - dateext
- dateyesterday - dateyesterday
/opt/so/log/elasticfleet/*_x_ndjson:
- daily
- rotate 14
- missingok
- copytruncate
- compress
- create
- extension .ndjson
- dateext
- dateyesterday
/opt/so/log/suricata/*_x_log: /opt/so/log/suricata/*_x_log:
- daily - daily
- rotate 14 - rotate 14

11
salt/logrotate/soc_logrotate.yaml
View File

@@ -63,9 +63,16 @@ logrotate:
multiline: True multiline: True
global: True global: True
forcedType: "[]string" forcedType: "[]string"
"/opt/so/log/fleet/*_x_log": "/opt/so/log/elasticfleet/*_x_log":
description: List of logrotate options for this file. description: List of logrotate options for this file.
title: /opt/so/log/fleet/*.log title: /opt/so/log/elastic-fleet/*.log
advanced: True
multiline: True
global: True
forcedType: "[]string"
"/opt/so/log/elasticfleet/*_x_ndjson":
description: List of logrotate options for this file.
title: /opt/so/log/elastic-fleet/*.ndjson
advanced: True advanced: True
multiline: True multiline: True
global: True global: True