argusarchive 101

[Robin Gruyters]

Hi ya,

There are different ways todo this. You can use argusarchive to rotate  
the file hourly. (Argusarchive is a basic shell script, no help  
available)
Or, you can use rasplit(1) to rotate it nightly (with use of cron(8)):

# rasplit -r /nsm/argus/flow.argus -M time 60m \
    -w /nsm/argus/archive/%Y/%m/%d/argus_%H:%M:%S

This will split up the flow.argus file into separate files based on  
Year (%Y), month (%m), day (%d), hour (%H), minutes (%M) and seconds  
(%S).

e.g.

/nsm/argus/archive/2007/06/04/argus_07:00:00
/nsm/argus/archive/2007/06/04/argus_08:00:00
/nsm/argus/archive/2007/06/04/argus_09:00:00
..


Kind regards,

Robin Gruyters
Network and Security Engineer
Yirdis B.V.
I: http://yirdis.com
P: +31 (0)36 5300394
F: +31 (0)36 5489119


Quoting Robert Leyba <r_leyba14 at yahoo.com>:

> Hi again,
>
> ...been searching the forums on a basic command structure of the argusarchive
> utility, but can't seem to find any hits.  There also doesn't appar   
> to be a man
> file for this.
>
>     Basically, we would want to rotate our log files nightly (around  
>  midnight)
> so that we have several 24 hr. long log files instead of one very large file.
>
>    Could someone pls. advise on the proper syntax?
>
> thanks
>
> --robert
>


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: PGP Digital Signature
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20070604/9529f200/attachment.sig>