suricata logs killing my system

[4o4rh]

I see the suricata logs for just one interface are at 2.5G,
so the log management does not seem to be working.

I have already increased my tpmfs space 2x.

I had to do the below, even though the log limit was 100M and i have changed to 7 days retention.
rm alerts.log.*
rm http.log.*

[unico-dm]

Maybe (if this is still an issue for you) you want to join this discussion

The discussion is quite old but I've added my concerns today anyway.