Merge pull request #12450 from Security-Onion-Solutions/fix/suricata_max_age

Roll Suricata logs daily to prevent alerts from being deleted when not meeting size threshold
This commit is contained in:
weslambert authored and GitHub committed 2024-02-27 17:28:07 -05:00
commit d1e55d5ab7
1 file changed
+1 -1
+1 -1
View File
@@ -10597,7 +10597,7 @@ elasticsearch:
hot:
actions:
rollover:
max_age: 30d
max_age: 1d
max_primary_shard_size: 50gb
set_priority:
priority: 100