@pirxthepilot osquery log rotation on Linux follows the standard format (google "logrotate example" to find lots of help). Here's a discussion on osquery's github page that discusses logrotate and provides a simple logrotate config. Hope that helps. 🙂 https://github.com/facebook/osquery/issues/302#issuecomment-62826162