Just a reminder that osquery needs a log size roll...
# general
m
Just a reminder that osquery needs a log size rollover function, because otherwise it just sits there and makes a log so big that it eventually crashes the daemon. Other noteable projects that don't just let their logs increase until the binary crashes: Windows event log (20mb limit by default); nginx (chunks the log file and archives the old files, cleanup script to remove x archives is easy). ETC.
c
Have you created a Github feature request?
3
m
No, so I should 😄
I have now done so