Are there any best practices? & How to delete old messages?

Hello

Are there any best practices for a good setup - after the install?

For example: "Move every messages from special devices/IPs to a separated log file or database"

"Log all messages into one SQL Database"

"You should log all massages first to an SQLDB and after that some of them into different files"...

Maybe there are some Rule Templates which I could import and use?

And: How can I delete old messages? In Legacy Kiwi Syslog Server I could set a limit, for example 60 Days. After this time older messages where removed. In Kiwi NG I miss this setting.

Find more posts tagged with

setup

kiwi_filters

rules

logfile

kiwi syslog ng

Accepted answers

All comments

MWH

I would like to also know about that. I bought the software recently and I'm struggling to find straight out clear information on how to do certain things. like, how to clear logs? why can't i create users without email verification? why can't i group events per category and display them as such? there are other things i can't think of now, but the most insisting issue right now is how to clear and reset the events\logs.