auditlog.log managment

[TBT]

We noticed /usr/local/nagiosxi/var/components/auditlog.log is eating up a lot of disk.

1. Can size/rotation be managed within XI or should logrotate be setup on the auditlog.log?
2. Any harm in deleting the auditlog.log while Nagios is running in situations where the server is running out of diskspace?

Please advise,

[ssax]

1. It would need to be setup with logrotate, you could throw something like this into /etc/logrotate.d:
- Adjust per your requirements

Code: Select all

/usr/local/nagiosxi/var/components/auditlog.log {
    missingok
    notifempty
    size 1024M
    create 0660 apache nagios
    su apache nagios
    rotate 1
    compress
}

2. No harm, you can truncate it with the command below at any time if you need, it will just remove the auditlog.log entries, the DB Audit Log entries (that Admin > Audit Log uses) should still be retained based on the retention settings in Admin > Performance Settings > Databases > Max Audit Log Age.

Code: Select all

>/usr/local/nagiosxi/var/components/auditlog.log