[git.ipfire.org] IPFire 2.x development tree branch, master, updated. 0a634bf539610d9aa6e4e974c65bec853116c5f1

[Michael Tremer <git@ipfire.org>]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, master has been updated
       via  0a634bf539610d9aa6e4e974c65bec853116c5f1 (commit)
      from  9c65846ad50851ee6de91b1ddf47d662a4390183 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 0a634bf539610d9aa6e4e974c65bec853116c5f1
Author: Michael Tremer <michael.tremer@ipfire.org>
Date:   Mon May 18 17:29:37 2026 +0000

    Revert "logrotate: Rotate Suricata logs daily"
    
    This reverts commit 30ccb9ed80ee3ad70403794da4c937fd183b9bd8.
    
    Fixes: #13977 - IPS log viewer shows empty/deleted logs after midnight after Suricata logs were changed to daily rotation
    Reported-by: Adam Gibbons <ag@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 config/etc/logrotate.conf | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

Difference in files:
diff --git a/config/etc/logrotate.conf b/config/etc/logrotate.conf
index 2f79de933..c5f9883c7 100644
--- a/config/etc/logrotate.conf
+++ b/config/etc/logrotate.conf
@@ -29,12 +29,14 @@ include /etc/logrotate.d
 }
 
 /var/log/suricata/*.log {
-    daily
+    weekly
     copytruncate
-    notifempty
+    compress
+    ifempty
     missingok
-    sharedscripts
     postrotate
+	/bin/find /var/log/suricata -path '/var/log/suricata/[0-9]*' -prune -exec /bin/rm -rf {} \;
+	/bin/find /var/log/suricata -name 'fast.log.*' -mtime +28 -exec /bin/rm -rf {} \;
 	/bin/kill -HUP `cat /var/run/suricata.pid 2> /dev/null` 2> /dev/null || true
     endscript
 }


hooks/post-receive
--
IPFire 2.x development tree