Re: Database optimalisation and rotation.
"Skippy Lou" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
> > > > 2. How to rotate events in database? For example I wish to store only > data from last week since more data will crawl my database server to > death. How to periodically (f.e. each night) purge the database from > data older than N days? > I do something similar with regards to heartbeat messages, scripting something similar to: preludedb-admin delete "type=mysql name=prelude user=root pass=password" --heartbeat-criteria "heartbeat.create_time < 2008-01-15 There is a --alert-criteria option to preludedb-admin delete, so you should be able to find a way to do what you wish. Hope that helps, Scott _______________________________________________ Prelude-user site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-user