# BroControl config to delete instead of archive on rotation

**URL:** <https://community.zeek.org/t/brocontrol-config-to-delete-instead-of-archive-on-rotation/4857>\
**Category:** Zeek\
**Created:** [May 25, 2017, 6:55pm UTC](https://community.zeek.org/t/brocontrol-config-to-delete-instead-of-archive-on-rotation/4857 "2017-05-25T18:55:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Josh\_Liburdi](https://avatars.discourse-cdn.com/v4/letter/j/df705f/32.png) [@Josh\_Liburdi](https://community.zeek.org/u/Josh_Liburdi)\
**Post date:** [May 25, 2017, 6:55pm UTC](https://community.zeek.org/t/brocontrol-config-to-delete-instead-of-archive-on-rotation/4857/1 "2017-05-25T18:55:10Z")

</div>

Anyone have experience with configuring BroControl to delete log files instead of archiving them upon rotation? I have a scenario where it’s better for me to delete the rotate log files instead of keeping them around.

Thanks!  
Josh

---

<div class="post-metadata">

**Author:** ![Daniel\_Thayer](https://avatars.discourse-cdn.com/v4/letter/d/8dc957/32.png) [@Daniel\_Thayer](https://community.zeek.org/u/Daniel_Thayer)\
**Post date:** [May 25, 2017, 7:48pm UTC](https://community.zeek.org/t/brocontrol-config-to-delete-instead-of-archive-on-rotation/4857/2 "2017-05-25T19:48:59Z")

</div>

BroControl doesn't actually archive logs (Bro does that by running  
a script every time the logs are rotated). BroControl does have  
an option to expire archived logs, so you could set something like  
this in your broctl.cfg file:  
LogExpireInterval = 1hr

You could also turn off compression to reduce the load on your  
machine:  
CompressLogs = 0

A more drastic option is to modify the archive-log script to delete  
the logs before they are archived.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:44pm UTC](https://community.zeek.org/t/brocontrol-config-to-delete-instead-of-archive-on-rotation/4857/3 "2022-05-06T15:44:58Z")

</div>


