jertel / dmarc2logstash

Injects POP3-polled DMARC feedback reports into Elasticsearch via Logstash and Filebeat.
MIT License
16 stars 4 forks source link

File just keeps growing? #9

Closed fribse closed 1 year ago

fribse commented 1 year ago

Hi there I only see 1 file in the dmarclogs folder, and it just keeps growing with new entries. How do I make it clean up or create multiple files that can be cleaned up? The filebeat has read-only rights to the shared folder, so that can't do anything to it (running it in docker-compose). The dmarc2filebeat has a lot of activity as it should, but I don't see any new activity since start of 2023?

jertel commented 1 year ago

Hello,

It looks like you have two concerns:

  1. dmarc.log output file continously grows. Yes, this is expected. Consider using a tool such as Logrotate to manage these log files by rotating them on a periodic basis.
  2. Some other file shows a lot of activity, but yet no activity for 2023. I don't have enough information to help. Please provide logs or screenshots so I can better understand this.
fribse commented 1 year ago

It finally made it through all the entries, and the logrotate works perfectly. Thankyou!