Installing Bro automatically creates the following cron
jobs,
which are run on at the specified intervals.
site-report.pl
: generates an email report of all alarms
and notifications
mail_reports.sh
: send email reports
check_disk.sh
: send email if disk space is too low
bro_log_compress.sh
: remove/compress old log files
$BROHOME/etc/bro.cfg
.
The settings are as follows:
check_disk.sh
:
diskspace_pct
: when disk is >= this percent full, send
email (default = 85%)
diskspace_watcher
: list of email addresses to send mail
to
bro_log_compress.sh
:
Days2deletion
: remove files more than this many days old
(default = 60)
Days2compression
: compress files more than this many
days
old (default = 30)