[ARGUS] log file roll-over

[John Nagro]

argus archieve? i'm not sure what you mean by that. and if i cycle out
the old logs, thats not a roll-over? i need some explination

-John

On Wed, 23 Jun 2004 11:55:27 -0700, Peter Van Epp <vanepp at sfu.ca> wrote:
> 
>         Assuming you are rolling with argusarchive all you can currently do is
> reduce the time between log rolls by changing the interval that it runs in
> cron. It is a shell script so if you write something (a perl script?) that
> stats the argus.out file and renames it when it gets to a certain size that
> will do what you want (or someone may have already done it on the list here),
> but argusarchive won't as it stands. As I recall Eric told me he was rolling
> his logs every 10 minutes to keep the log volume reasonable (I'm rolling once
> an hour without problem so far).
> 
> Peter Van Epp / Operations and Technical Support
> Simon Fraser University, Burnaby, B.C. Canada
> 
> 
> 
> 
> On Wed, Jun 23, 2004 at 02:35:27PM -0400, John Nagro wrote:
> > is it possible to set argus to roll over the log file? ie not get
> > larger than a give amount? (such as 128mb, 256mb, etc)
> >
> > We have a lot of traffic to monitor and logs get big very fast, and
> > big means harder to process.
> >
> > -John Nagro
>