[Snort-users] event database size

John Newman jnn at ...13788...
Tue May 23 08:39:14 EDT 2006


Anyone out there know of any good pre-existing solutions to keeping the
event database from growing ever bigger and bigger?  I suppose some
simple sql code, e.g. 

delete from snort.event where time < 'XXXXX'

or something like that....  is this what others are doing?

-- 
John Newman
Systems Administrator, WebXess Inc.




More information about the Snort-users mailing list