Re: [Sguil-users] Delete past entries
Status: Beta
Brought to you by:
bamm
From: Bamm V. <bam...@gm...> - 2008-06-12 17:27:48
|
Stop sguild. mysql> UPDATE event SET status=1 WHERE status=0; You can add a date condition too. mysql> UPDATE event SET status=1 WHERE status=0 AND timestamp < '2008-06-10'; This is assuming the events are in the DB already. Bammkkkk On Thu, Jun 12, 2008 at 11:11 AM, Ray Ellington <rel...@th...> wrote: > My sguil installation has been down for awhile and now that I've upgraded > and got it running again it's taking forever to catch up to the present day. > Is there any way I can delete all of the past entries in the database or > wherever the client is pulling from? > > > > Thanks, > > > > Ray Ellington > > Network Security Administrator > > American Board of Family Medicine > > (859) 269-5626 ext. 289 > > > > ------------------------------------------------------------------------- > Check out the new SourceForge.net Marketplace. > It's the best place to buy or sell services for > just about anything Open Source. > http://sourceforge.net/services/buy/index.php > _______________________________________________ > Sguil-users mailing list > Sgu...@li... > https://lists.sourceforge.net/lists/listinfo/sguil-users > > -- sguil - The Analyst Console for NSM http://sguil.sf.net |