Giovanni Giannola

12/30/2021, 9:01 PM
Hey, The osquery.results.log file and other osquery related log files in /var/log/osquery takes up considerable disk space. Is there a way to reduce that in some way? Maybe limit the amount of time we keep those stored on the server or something?


12/30/2021, 9:33 PM
Yes. You should do those things. The general approach is to use the underlying system's log rotation tools. Though osquery does now have some native log rotation. See the
flag. https://github.com/osquery/osquery/issues/302 has some discussion