Actions
Support #2801
closedDisable/Enable suricata logs on a running instance
Status:
Closed
Priority:
Normal
Assignee:
-
Affected Versions:
Label:
Description
Hi,
I tried to disable/enable suricata logs ie fast.log,eve.log,stats.log on a running suricata instance by sending "kill -USR2 <pid_suricata>" signal after updating the yaml file. But, i observe that the changes in the yaml file are not reflected. The log disable/enable did not happen.
Could you please let me know if it is supported. If yes, how would i achieve it
Thanks
Pavan
Updated by Victor Julien about 5 years ago
- Priority changed from Immediate to Normal
This is not supported at this time. The USR2 signal will reload the rules only. Log output cannot dynamically be enabled/disabled.
Actions