ata from there and not
directly from a single table?
Dimitris
-Original Message-
From: ossec...@googlegroups.com
[mailto:ossec...@googlegroups.com ] On Behalf Of dan
(ddp)
Sent: Tuesday, February 22, 2011 03:52
To: ossec...@googlegroups.com
Subj
this is also similar to a question I have about being able to modify the DB
with known good changes to files so we don't get alerted on our hotfix
process
On Monday, February 21, 2011 at 7:01:31 AM UTC-5, Dimitris Chontzopoulos
wrote:
>
> Hello everyone,
>
> We're trying to remove data from wit
Tuesday, February 22, 2011 03:52
> To: ossec...@googlegroups.com
> Subject: Re: [ossec-list] How to purge/remove/delete data older than a
> specific date from within the database
>
> I think everything in the database it timestamped. You should be able
> to make a query to d
ginal Message-
From: ossec-list@googlegroups.com [mailto:ossec-list@googlegroups.com] On
Behalf Of dan (ddp)
Sent: Tuesday, February 22, 2011 03:52
To: ossec-list@googlegroups.com
Subject: Re: [ossec-list] How to purge/remove/delete data older than a specific
date from within the database
I think everyt
ove/delete data older than a specific
date from within the database
Hi,
Just type in the following commands:
cd /var/ossec/logs/alerts///
Here you find the logs of all the days in each month. Just delete them using rm
-rf command. I havent come across any oher automated tool for the same.
I think everything in the database it timestamped. You should be able
to make a query to delete everything previous to a certain date.
On Mon, Feb 21, 2011 at 7:01 AM, Dimitris Chontzopoulos
wrote:
> Hello everyone,
>
> We're trying to remove data from within the OSSEC Database that are older
>
Hi,
Just type in the following commands:
*cd /var/ossec/logs/alerts///*
Here you find the logs of all the days in each month. Just delete them using
*rm -rf* command. I havent come across any oher automated tool for the same.
Regards
Tanishk
On Mon, Feb 21, 2011 at 5:31 PM, Dimitris Chontzopoul
Hello everyone,
We're trying to remove data from within the OSSEC Database that are older than
a specific date, but we can't find a tool that would
remove that data easily without harming the rest of the database.
Is there a query of some sort we could run, so as to gather the data we're
intere
