https://github.com/osquery/osquery logo
#fleet
Title
m

Marc Roelofs

05/04/2022, 9:19 AM
Hi, when setting the filesystem​_enable​_log​_rotation variable to True, will Fleet generate a log.1 and log.2 file, or simply truncate the existing log file? As when truncating is used the total amount of log space required is minimal (500MB) but if files are generated with sequence numbers , we still need to manage the log space in a different way
k

Kathy Satterlee

05/04/2022, 8:54 PM
Hi, @Marc Roelofs! Great question. Fleet does generate a new file, but caps at a max of three archived files. You can also choose to compress the files when rotating with
filesystem​_enable​_log​_compression
to reduce space.
m

Marc Roelofs

05/05/2022, 6:44 AM
3 files , thats all I needed to know, thanks !
3 Views