Hey, The osquery.results.log file and other osquer...
# general
g
Hey, The osquery.results.log file and other osquery related log files in /var/log/osquery takes up considerable disk space. Is there a way to reduce that in some way? Maybe limit the amount of time we keep those stored on the server or something?
s
Yes. You should do those things. The general approach is to use the underlying system's log rotation tools. Though osquery does now have some native log rotation. See the
--logger_rotate
flag. https://github.com/osquery/osquery/issues/302 has some discussion