<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>I've changed mine to update every 60 seconds instead of 8.<div>And configured logrotate to roll stats.log to prevent from running out of space.</div><div>I also use last two sets of logs in stats.log to figure out how many packets were processed and how many alerts occurred in a minute<br><br><div>> Date: Thu, 30 Apr 2015 09:46:09 -0700<br>> From: jimoe@sohnen-moe.com<br>> To: oisf-users@lists.openinfosecfoundation.org<br>> Subject: Re: [Oisf-users] About the ever-growing stats.log<br>> <br>> -----BEGIN PGP SIGNED MESSAGE-----<br>> Hash: SHA1<br>> <br>> On 04/29/2015 12:17 AM, Peter Manev wrote:<br>> > - stats: enabled: yes filename: stats.log append: no<br>> > <br>> Did that. It makes no difference.<br>> <br>> - -- <br>> James Moe<br>> moe dot james at sohnen-moe dot com<br>> 520.743.3936<br>> -----BEGIN PGP SIGNATURE-----<br>> Version: GnuPG v2<br>> <br>> iEYEARECAAYFAlVCXFEACgkQzTcr8Prq0ZOkdgCfSgjCjmHz0o6lVL5ekNuzR63Z<br>> tQIAnjU0Ktcjh4mG+3jCSt+V1VY/khjU<br>> =gOxG<br>> -----END PGP SIGNATURE-----<br>> _______________________________________________<br>> Suricata IDS Users mailing list: oisf-users@openinfosecfoundation.org<br>> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/<br>> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users<br>> Suricata User Conference November 4 & 5 in Barcelona: http://oisfevents.net<br></div></div> </div></body>
</html>