ICS-777: Switch logrotate interval to hourly
This is to address an issue where some IOCs spam the IOC shell log producing as much as 20GB in a single day.
Note that this is really just a bandaid fix; a better solution should be found to address how we write, store, and process IOC shell logs.
Merge request reports
Activity
assigned to @simonrose
requested review from @henriquesilva
Just a note for the future reader, this change does not mean that logrotate will run hourly, the execution period is schedule by cron. This only means that logrotate will take into consideration in its decision if the file was rotated in the last hour (but it will also consider the file size, so it won't actually rotate every hour if it doesn't need to, see the decision tree here: https://github.com/logrotate/logrotate/blob/cb99cda639fb4b65810401878e052b7c2950f996/logrotate.c#L1444).
To have this "fix" applied, one must also move the logrotate script from
/etc/cron.daily/logrotate
to/etc/cron.hourly/logrotate
.Edited by Henrique Silvamentioned in commit 350d3d8a