JeffBeall
asked on
Snort MySql
I have a Linux machine setup to run Snort to monitor my network. Its been several months and the number of alerts is huge. Is there a good way to clear out the database? Its using MySql, and I know next to nothing about MySql.
You could do a backup of your database (if you want to save the information) and then wipe out the tables and start over. What do you use to access your MySQL database?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks for the link, near the bottom it had something about clearing the cache when you use Base. I tried it and it worked great.
hi
other way to do it is enter to the database but you would need to understand which parameters should be used:
http://www.snort.org/archive-5-4002.html
other way to do it is enter to the database but you would need to understand which parameters should be used:
http://www.snort.org/archive-5-4002.html