# The problem of log rotation and pcap files in the zeek

**URL:** <https://community.zeek.org/t/the-problem-of-log-rotation-and-pcap-files-in-the-zeek/7875>\
**Category:** Zeek\
**Created:** [October 5, 2025, 1:58pm UTC](https://community.zeek.org/t/the-problem-of-log-rotation-and-pcap-files-in-the-zeek/7875 "2025-10-05T13:58:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![moho](https://avatars.discourse-cdn.com/v4/letter/m/ccd318/32.png) [@moho](https://community.zeek.org/u/moho)\
**Post date:** [October 5, 2025, 1:58pm UTC](https://community.zeek.org/t/the-problem-of-log-rotation-and-pcap-files-in-the-zeek/7875/1 "2025-10-05T13:58:40Z")

</div>

I want to disable log rotation in the zeek it creates lot of folder in the /opt/zeek/logs/current/ and put log files in it and archive them. I don’t want this behavior because of that I disabled the log rotation interval in the /opt/zeek/etc/zeekctl.cfg but it still do that!!!

second problem is it stores pcap files in the /opt/zeek/spool/extract\_files . I disabled the policy extract all files in the local.zeek but didn’t solved!!!?

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [December 4, 2025, 1:59pm UTC](https://community.zeek.org/t/the-problem-of-log-rotation-and-pcap-files-in-the-zeek/7875/2 "2025-12-04T13:59:10Z")

</div>

This topic was automatically closed after 60 days. New replies are no longer allowed.