[Snort-users] event database size

John Newman jnn at ...13788...
Tue May 23 08:39:14 EDT 2006

Anyone out there know of any good pre-existing solutions to keeping the
event database from growing ever bigger and bigger?  I suppose some
simple sql code, e.g. 

delete from snort.event where time < 'XXXXX'

or something like that....  is this what others are doing?

John Newman
Systems Administrator, WebXess Inc.

More information about the Snort-users mailing list