StamusNetworks / SELKS

A Suricata based IDS/IPS/NSM distro
https://www.stamus-networks.com/open-source/#selks
GNU General Public License v3.0
1.43k stars 283 forks source link

How many Gbs is recomended to use moloch #279

Open ngms17 opened 3 years ago

ngms17 commented 3 years ago

I note that using moloch the diks fills up pretty fast. Instead, if i use the first option, the disk fills up pretty slowly. So how many Gb are recommended to use moloch?

Then moloch will delete files when the disk is full?

pevma commented 3 years ago

It actually depends on the traffic volume to be honest. There is size and time limits that are setup with Moloch during the setup routine.