Skip to content

FIX: Logstash log rollover #14065

Open
Open
@reyesj2

Description

Logstash log rollover policy needs to be reviewed. Under certain circumstances the logstash log can grow quickly due to repeating errors e.g redis maxqueue.

Logstash rollover policy should be updated to include timebased & size based rollover. To include deleting the oldest log files

https://github.com/Security-Onion-Solutions/securityonion/blob/2.4/main/salt/logstash/etc/log4j2.properties

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions