search

jasonish / evebox

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
https://evebox.org/
MIT License
417 stars 67 forks source link

[sqlite] File size based retention #256

Closed jasonish closed 1 year ago

jasonish commented 1 year ago

Allow event retention to be specified base on the maximum size of the SQLite database file. This is more predictable/manageable than days.