Disabling circular logs

[nycaleksey]

Hi,

I'm trying to make Splunk forwarder for FreeBSD work on OPNsense and it seems to be working ok, except for the fact that it gets really confused by the circular logs.

Does anyone know if it is possible to disable circular logging and save log events to disk files in an old-fashioned way?

Thank you.

[franco]

You can only disable local logging and/or use a simple forwarding syslog instead of scraping local logs. You can set forwarding servers under System: Settings: Logging.


Cheers,
Franco

[nycaleksey]

Franco,

I don't want to disable local logging, just want to disable the circular nature (fixed size files) of it and deal with the risk of running out of space. Is it by any chance possible, maybe as an advanced setting of some kind?

Thank you.

[franco]

Hi there,

Sorry for tiptoeing around the answer: no, the behaviour for circular logs is inherent.


Cheers,
Franco