These files contain all logged data from a specified point in time. It is not practical to retain all data in a single file indefinitely, and available disk space may be limited. System administrators need to balance the demand for ready access to recent messages with the availability of disk space. This allows you to retain a specified number of historical files, delete the oldest file, and create a new file to store any new messages arriving after newarguslog is executed. This implementation describes how to use newarguslog on the Sun Solaris operating system, version 2.x.
Preparation Rotating the log files helps to reduce log file analysis time by an argus client.
As long as past log files are still accessible and available, they can be analyzed by referencing the appropriate log file as a command line argument. See the appropriate manual pages for the arguments you need to provide to the argus clients. To meet your requirements, you need to make three decisions before editing the newarguslog script and enabling a periodic call of this script. Decide on the time period for rotating argus files. One week seems a reasonable time period for all hosts that monitor a network using argus .