Re: Prelude database maintenance
Webmaster <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
Jaime, Yes there is. Put the text below in a bash script -->Script start: #!/bin/sh DATE=$(date -d "last month" +"%Y-%m-%d") preludedb-admin delete alert "type=pgsql name=prelude user=prelude pass=prelude" --criteria "alert.create_time < $DATE" --< Script end This one delete all events older than 30 days. If you replace "last month" with "6 months" then it will delete everything older than 6 months. Note replace pgsql with mysql if you run mysql and accordingly the user and password for the db. If you add the script above to a cron job, it could be done on a daily basis. I had put this in the wiki so it's there to. Jaime Ventura wrote: > Hello, > the prelude DB on my system is getting really big, causing prewikka > to run very slow. > Is there any quick way to "archive" old records (say 6 month old)? > > Thanks. > Jaime > > -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user