Re: Prelude database maintenance

Webmaster <[email protected]>
Newsgroups gmane.comp.security.ids.prelude.user
Message-ID <[email protected]>
Jaime,

Yes there is.

Put the text below in a bash script

-->Script start:

#!/bin/sh
DATE=$(date -d "last month" +"%Y-%m-%d")
preludedb-admin delete alert "type=pgsql name=prelude user=prelude pass=prelude" --criteria "alert.create_time < $DATE"


--< Script end
This one delete all events older than 30 days. If you replace "last 
month" with "6 months" then it will delete everything older than 6 months.

Note replace pgsql with mysql if you run mysql and accordingly the user 
and password for the db.

If you add the script above to a cron job, it could be done on a daily 
basis.

I had put this in the wiki so it's there to.

Jaime Ventura wrote:
> Hello,
>     the prelude DB on my system is getting really big, causing prewikka
> to run very slow.
>     Is there any quick way to "archive" old records (say 6 month old)?
>
>     Thanks.
>        Jaime
>
>   

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-user
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.